Perhaps some of you have gone down this path before and can offer some
helpful suggestions. I need to convert a group of servers to LDAP
authentication. Most of the user accounts on these systems have
consistent uids and gids across all the servers. There are a few
exceptions but the people who need to access the servers on a daily
basis should all have the same account uid on every machine.
My questions are:
1. Can you disable local authentication for all users except root
once LDAP authentication is in place?
2. If there are some users who only need access to a small number of
servers, how would you handle that situation?
3. When adding new users, do you create them a private group to avoid
id: cannot find name for group ID 5001
Any other tips, tricks, or gotchas are most welcome!