Re: [CentOS] user management solution needed

2009-11-04 Thread Christopher Chan
Alan McKay wrote: > Hey folks, > > What is the best way to manage users across multiple CentOS boxes? > > Ideally what I'd like to be able to do is have central control over > who has access to which box from a minute-to-minute basis. e.g. User > X needs access to Box A for 30 minutes - clickity,

Re: [CentOS] user management solution needed

2009-11-04 Thread Brian Mathis
On Wed, Nov 4, 2009 at 9:07 PM, Kwan Lowe wrote: [...] > The problem with relying on documentation, even great documentation, > is that it puts the responsibility on the admin to follow. Now we all > know of the bad admins that can't follow directions, but in my > experience, the culprit is often

Re: [CentOS] user management solution needed

2009-11-04 Thread Kwan Lowe
On Wed, Nov 4, 2009 at 8:54 PM, Alan McKay wrote: [snip] > And yes, I document everything very well!   My motto is "If you aren't > spending 5% to 10% of your time documenting what you do, then neither > you nor your manager are doing their job" These are words to live and die by :D I also agree

Re: [CentOS] user management solution needed

2009-11-04 Thread mark
Alan McKay wrote: >> Ever since I have actively worked to get LDAP out of my systems. Don't >> need single sign on, don't care. Haven't used that particular piece >> of wiki software either since, the data is trapped in a zope database. > > OK, I definitely do NOT need single-sign-on, if if it wou

Re: [CentOS] user management solution needed

2009-11-04 Thread Alan McKay
> Ever since I have actively worked to get LDAP out of my systems. Don't > need single sign on, don't care. Haven't used that particular piece > of wiki software either since, the data is trapped in a zope database. OK, I definitely do NOT need single-sign-on, if if it would be cool. I just need

Re: [CentOS] user management solution needed

2009-11-04 Thread Alan McKay
> I too have experienced this PAIN!!! > However I never quite got it done, always seemed real close but not quite. > Did you document?? This is sadly a pretty major area where open source falls down way, way too often. I'd far sooner go with the 2nd best solution that has really good documentati

Re: [CentOS] user management solution needed

2009-11-04 Thread mark
Rob Kampen wrote: > m.r...@5-cent.us wrote: >>> OK, google comes up with what looks like some easy HOWTOs for LDAP >>> >>> I'll dig in and come back with questions as required >>> >> Don't believe it. >> spare), I got it in. openLDAP's docs were *way* insufficient, and the >> tools that come wi

Re: [CentOS] user management solution needed

2009-11-04 Thread Craig White
On Wed, 2009-11-04 at 18:24 -0500, Brian Mathis wrote: > You're getting dangerously close to saying "Everything you need to > know is in the source code", or more succinctly, "RTFM an piss off". > No one is saying that people shouldn't understand how LDAP works, but > there's a world of difference

Re: [CentOS] user management solution needed

2009-11-04 Thread Les Mikesell
Craig White wrote: > >>> I suppose I don't understand what you are saying. Are you saying that >>> some of the LDAP servers are not compliant with RFC's for LDAP? Which >>> ones? how? >> No, I'm saying that there should have been standardized schemas eons ago >> for the things that everyone needs

Re: [CentOS] user management solution needed

2009-11-04 Thread Brian Mathis
On Wed, Nov 4, 2009 at 5:16 PM, Craig White wrote: > On Wed, 2009-11-04 at 17:01 -0500, Brian Mathis wrote: >> In my extremely limited experience with LDAP, it seem that the problem >> is not "LDAP" itself, but how to structure it.  Most howtos walk you >> through installing whatever software, and

Re: [CentOS] user management solution needed

2009-11-04 Thread Craig White
On Wed, 2009-11-04 at 16:15 -0600, Les Mikesell wrote: > Craig White wrote: > > >>> At that point, using OpenLDAP or CentOS-DS or Fedora-DS is more or less > >>> a matter of implementation details and utility. None of them are better > >>> than the other for most purposes and even things like the

Re: [CentOS] user management solution needed

2009-11-04 Thread Keith Keller
On Wed, Nov 04, 2009 at 02:02:37PM -0700, Craig White wrote: > > Gerald Carter's book 'LDAP System Administration' is the only book that > I found that simplified the understanding of LDAP, how it works, how to > use it, etc. This book probably takes 3-4 hours to digest, work through > the example

Re: [CentOS] user management solution needed

2009-11-04 Thread Rob Kampen
Craig White wrote: On Wed, 2009-11-04 at 15:26 -0500, Rob Kampen wrote: m.r...@5-cent.us wrote: OK, google comes up with what looks like some easy HOWTOs for LDAP I'll dig in and come back with questions as required Don't believe it. The fall of '06, my manager and the

Re: [CentOS] user management solution needed

2009-11-04 Thread Craig White
On Wed, 2009-11-04 at 17:01 -0500, Brian Mathis wrote: > > In my extremely limited experience with LDAP, it seem that the problem > is not "LDAP" itself, but how to structure it. Most howtos walk you > through installing whatever software, and then say "OK, now you have > LDAP!" > > The problem

Re: [CentOS] user management solution needed

2009-11-04 Thread Les Mikesell
Craig White wrote: >>> At that point, using OpenLDAP or CentOS-DS or Fedora-DS is more or less >>> a matter of implementation details and utility. None of them are better >>> than the other for most purposes and even things like the consoles in >>> Fedora-DS aren't going to make it any easier for

Re: [CentOS] user management solution needed

2009-11-04 Thread Kwan Lowe
> In my extremely limited experience with LDAP, it seem that the problem > is not "LDAP" itself, but how to structure it.  Most howtos walk you > through installing whatever software, and then say "OK, now you have > LDAP!" Agreed. > The problem is that LDAP is useless without a structure and dat

Re: [CentOS] user management solution needed

2009-11-04 Thread Brian Mathis
On Wed, Nov 4, 2009 at 4:44 PM, Craig White wrote: > On Wed, 2009-11-04 at 15:25 -0600, Les Mikesell wrote: >> Craig White wrote: >> > At that point, using OpenLDAP or CentOS-DS or Fedora-DS is more or less >> > a matter of implementation details and utility. None of them are better >> > than the

Re: [CentOS] user management solution needed

2009-11-04 Thread Craig White
On Wed, 2009-11-04 at 15:25 -0600, Les Mikesell wrote: > Craig White wrote: > > At that point, using OpenLDAP or CentOS-DS or Fedora-DS is more or less > > a matter of implementation details and utility. None of them are better > > than the other for most purposes and even things like the consoles

Re: [CentOS] user management solution needed

2009-11-04 Thread Kwan Lowe
> However I never quite got it done, always seemed real close but not quite. > Did you document?? > I am now trying the RH / Fedora DS - no problem getting it installed but > configuration > Any pointers to docs that actually work. I have purchased books, read > magazines and spent probably

Re: [CentOS] user management solution needed

2009-11-04 Thread m . roth
> Craig White wrote: >> At that point, using OpenLDAP or CentOS-DS or Fedora-DS is more or less >> a matter of implementation details and utility. None of them are better >> than the other for most purposes and even things like the consoles in >> Fedora-DS aren't going to make it any easier for you

Re: [CentOS] user management solution needed

2009-11-04 Thread Les Mikesell
Craig White wrote: > At that point, using OpenLDAP or CentOS-DS or Fedora-DS is more or less > a matter of implementation details and utility. None of them are better > than the other for most purposes and even things like the consoles in > Fedora-DS aren't going to make it any easier for you to us

Re: [CentOS] user management solution needed

2009-11-04 Thread Craig White
On Wed, 2009-11-04 at 15:26 -0500, Rob Kampen wrote: > m.r...@5-cent.us wrote: > >> OK, google comes up with what looks like some easy HOWTOs for LDAP > >> > >> I'll dig in and come back with questions as required > >> > >> > > Don't believe it. > > > > The fall of '06, my manager and the othe

Re: [CentOS] user management solution needed

2009-11-04 Thread m . roth
> m.r...@5-cent.us wrote: > >> Don't believe it. > > I concur! > >> spare), I got it in. openLDAP's docs were *way* insufficient, and the >> tools that come with it are *not* ready for prime time, and user-surly, >> to >> say the least. > > Imagine what it was like even earlier, I vaguely recall th

Re: [CentOS] user management solution needed

2009-11-04 Thread m . roth
> m.r...@5-cent.us wrote: >>> OK, google comes up with what looks like some easy HOWTOs for LDAP >>> >>> I'll dig in and come back with questions as required >>> >> Don't believe it. >> >> The fall of '06, my manager and the other admin and I were discussing >> what to use for single sign-on. NIS h

Re: [CentOS] user management solution needed

2009-11-04 Thread m . roth
> m.r...@5-cent.us wrote: >>> OK, google comes up with what looks like some easy HOWTOs for LDAP >>> >>> I'll dig in and come back with questions as required >>> >> Don't believe it. >> >> The fall of '06, my manager and the other admin and I were discussing >> what to use for single sign-on. NIS h

Re: [CentOS] user management solution needed

2009-11-04 Thread nate
m.r...@5-cent.us wrote: > Don't believe it. I concur! > spare), I got it in. openLDAP's docs were *way* insufficient, and the > tools that come with it are *not* ready for prime time, and user-surly, to > say the least. Imagine what it was like even earlier, I vaguely recall the days/nights bac

Re: [CentOS] user management solution needed

2009-11-04 Thread Les Mikesell
m.r...@5-cent.us wrote: >> OK, google comes up with what looks like some easy HOWTOs for LDAP >> >> I'll dig in and come back with questions as required >> > Don't believe it. > > The fall of '06, my manager and the other admin and I were discussing what > to use for single sign-on. NIS has way to

Re: [CentOS] user management solution needed

2009-11-04 Thread Rob Kampen
m.r...@5-cent.us wrote: OK, google comes up with what looks like some easy HOWTOs for LDAP I'll dig in and come back with questions as required Don't believe it. The fall of '06, my manager and the other admin and I were discussing what to use for single sign-on. NIS has way too many hol

Re: [CentOS] user management solution needed

2009-11-04 Thread m . roth
> OK, google comes up with what looks like some easy HOWTOs for LDAP > > I'll dig in and come back with questions as required > Don't believe it. The fall of '06, my manager and the other admin and I were discussing what to use for single sign-on. NIS has way too many holes, and no one was wild ab

Re: [CentOS] user management solution needed

2009-11-04 Thread Alan McKay
OK, google comes up with what looks like some easy HOWTOs for LDAP I'll dig in and come back with questions as required -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of "In Defense of Food" ___ CentOS maili

Re: [CentOS] user management solution needed

2009-11-04 Thread m . roth
>> If thats all you need in place, a ldap based setup would work - perhaps >> even CDS > > Could you point me at examples of either of these? > > It is not clear to me where LDAP comes in - for authentication I > guess. But what about managing the password files? Or does one not > have to do tha

Re: [CentOS] user management solution needed

2009-11-04 Thread Alan McKay
> If thats all you need in place, a ldap based setup would work - perhaps > even CDS Could you point me at examples of either of these? It is not clear to me where LDAP comes in - for authentication I guess. But what about managing the password files? Or does one not have to do that? -- “Don

Re: [CentOS] user management solution needed

2009-11-04 Thread Karanbir Singh
On 11/04/2009 02:50 PM, Alan McKay wrote: > What is the best way to manage users across multiple CentOS boxes? If thats all you need in place, a ldap based setup would work - perhaps even CDS -- Karanbir Singh London, UK| http://www.karan.org/ | twitter.com/kbsingh ICQ: 2522219 |

[CentOS] user management solution needed

2009-11-04 Thread Alan McKay
Hey folks, What is the best way to manage users across multiple CentOS boxes? Ideally what I'd like to be able to do is have central control over who has access to which box from a minute-to-minute basis. e.g. User X needs access to Box A for 30 minutes - clickity, clickity and they have access

Re: [CentOS] User Management

2009-07-06 Thread Ross Walker
On Jul 6, 2009, at 12:15 PM, "Justin Lim" wrote: > I am just wondering how other people are doing their user management > for > multiple servers that not in any type of directory. > > Do anyone use any application that query each server for users or > keep a > database of users that's on each

Re: [CentOS] User Management

2009-07-06 Thread nate
Justin Lim wrote: > I am just wondering how other people are doing their user management for > multiple servers that not in any type of directory. > > Do anyone use any application that query each server for users or keep a > database of users that's on each server? > > I would like to get feedback

[CentOS] User Management

2009-07-06 Thread Justin Lim
I am just wondering how other people are doing their user management for multiple servers that not in any type of directory. Do anyone use any application that query each server for users or keep a database of users that's on each server? I would like to get feedback on what others use... Thank