Wow, fast reply Muzzol!
> 2. If there are some users who only need access to a small
> servers, how would you handle that situation?
modify /etc/security/limits.conf to your needs
What about /etc/security/access? Do you think this is the best way to
accomplish this? Assume that I have several hundred servers, but need
to grant temporary access to a developer on a few machines to look at
some log files. It seems like overkill to change a file on all
servers just to allow him access to one (or a few) servers.
i always create users in a default generic group, but that has
to do with your error.
> id: cannot find name for group ID 5001
you probably have nsswitch.conf missconfigured.
I assigned the gid on the LDAP server but it does not exist on the
client machine. I have a script to be able to create private groups
on all servers, was just curious how other people dealt with this
situation. I may create a generic "operators" group for new users who
need access to these systems, as you mentioned.