On Thu, 25 Sep 2014, Jakub Hrozek wrote:
If your goal is to have the same root password across an enterprise,
I
recommend something like Puppet or Ansible.
If the goal is to let users administer machines, then storing sudo rules
in LDAP is the best way forward.
I'm entirely in agreement with Jakub on this, although to sneak in an answer
that nearly satisfies your query, you /could/ use .k5login to allow them to
login over ssh as root with their kerberos credential. I don't think that's a
better solution than sudo/puppet though.
jh