Forum: Cfengine Help
Subject: Re: 3.0.2 too old?
Author: pettai
Link to topic: https://cfengine.com/forum/read.php?3,20392,20401#msg-20401

neilhwatson Wrote:
-------------------------------------------------------
> I would not recommend this method of user
> management.  A dedicated LDAP service is the
> better choice.

We only want to commission/decommission user+sysadmin accounts across all 
servers, and we don't want to tie them to a networked service as LDAP. We don't 
have an uniformed environment so useradd/usermod is the fastest/simplest 
approach for getting the job done. (and since we don't have a LDAP backend with 
fixed uidNumber's, there is no need for syncing those across all systems, even 
if that is more structured).

>  Using Cfengine you might have more
> success editing the passwd and shadow files
> directly. 

Well, I need to something similar (logics) then anyway, since NetBSD doesn't 
handle user-accounts as Solaris and Linux (Ubuntu) do. 

> See these examples:
> 
> http://www.cfengine.org/manuals/cf3-solutions.html
> #Manage-users

Right, my example was based on recipe #2 from those Manage-users recipes.
I was mostly looking for comments if my "code" was logically wrong, or if it 
should work but with a newer release of cfengine
(cf-promises -f ...cf doesn't complain)

> http://www.cfengine.org/manuals/cf3-solutions.html
> #Distribute-root-passwords

Re,
/P

_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to