[SSSD-users] root login with domain passwd

John Hodrien J.H.Hodrien at leeds.ac.uk
Thu Sep 25 08:10:06 UTC 2014


On Thu, 25 Sep 2014, Jakub Hrozek wrote:

> If your goal is to have the same root password across an enterprise, I
> recommend something like Puppet or Ansible.
>
> If the goal is to let users administer machines, then storing sudo rules
> in LDAP is the best way forward.

I'm entirely in agreement with Jakub on this, although to sneak in an answer
that nearly satisfies your query, you /could/ use .k5login to allow them to
login over ssh as root with their kerberos credential.  I don't think that's a
better solution than sudo/puppet though.

jh


More information about the sssd-users mailing list