Re: [Puppet Users] Ideas to allow users only on certain servers

2014-03-14 Thread Philippe Conway
Thanks Daren. LDAP authentication is definitely a possibility in our future. On Thursday, March 13, 2014 5:22:38 PM UTC-7, Darin Perusich wrote: > > Use LDAP so you have a single source for users and limit access w/groups > and ssh allowgroups. Check out OpenDJ if you need a powerful and easy t

Re: [Puppet Users] Ideas to allow users only on certain servers

2014-03-13 Thread Darin Perusich
Use LDAP so you have a single source for users and limit access w/groups and ssh allowgroups. Check out OpenDJ if you need a powerful and easy to setup LDAP server. On Mar 13, 2014 5:52 PM, "Philippe Conway" wrote: > So at my organization, we have different departments that should only have > acc

[Puppet Users] Ideas to allow users only on certain servers

2014-03-13 Thread Philippe Conway
So at my organization, we have different departments that should only have access to certain servers. For example: Dev Team: Dev Servers Tech Support: Production Server Admins: All servers How Puppet manages our users now, is once you add the user to the user manifest, it adds them too *all *t