[SSSD-users] root login with domain passwd
John Hodrien
J.H.Hodrien at leeds.ac.uk
Thu Sep 25 08:10:06 UTC 2014
On Thu, 25 Sep 2014, Jakub Hrozek wrote:
> If your goal is to have the same root password across an enterprise, I
> recommend something like Puppet or Ansible.
>
> If the goal is to let users administer machines, then storing sudo rules
> in LDAP is the best way forward.
I'm entirely in agreement with Jakub on this, although to sneak in an answer
that nearly satisfies your query, you /could/ use .k5login to allow them to
login over ssh as root with their kerberos credential. I don't think that's a
better solution than sudo/puppet though.
jh
More information about the sssd-users
mailing list