Manage sudo across large infrastructures

Rwac · 14 Aug 2009 at 15:40

How do you manage sudo across your infrastructure?

Licensed software, open source software, in-house tools?

growse · 14 Aug 2009 at 16:44

What do you mean by 'manage sudo'? You mean manage user accounts? If so, LDAP.

skiba · 16 Aug 2009 at 16:21

With great difficulty, sudoers under RCS control, a dev dist early in the week and a prod dist at the weekend as well as lots of scripted verification before the dist.

Would love to know of a better solution if anyone has one.

Rwac · 17 Aug 2009 at 12:16

growse said:
What do you mean by 'manage sudo'? You mean manage user accounts? If so, LDAP.

Specifically, the requirement is to manage access to 20-30 servers so it's not a desktop requirement. LDAP could be considered but I thought there might be something a bit lighter/elegant out there. I.e someway to manage the files centrally and to push out updated files to specific systems.

Of course this could be scripted in-house, but I'm not one for re-inventing the wheel :cool:

skiba · 17 Aug 2009 at 21:05

Ah, 20-30, I was talking 6,000+ !

That amount should be easy, one central sudoers, revision control and an rsync job, you don't need a custom version for each box.

Rwac · 18 Aug 2009 at 19:30

skiba said:
Ah, 20-30, I was talking 6,000+ !

That amount should be easy, one central sudoers, revision control and an rsync job, you don't need a custom version for each box.

Large probably wasn't the right word ;-)

Sounds good we already have revision control in place for other config files.

Ta