--On Wednesday, December 09, 2015 05:25:14 PM -0200 Friedrich Locke <friedrich.lo...@gmail.com> wrote:
> If you had about 10k users and 5k machine how would you manage > authenticating issues? Keep in mind that this is a very heterogenous > environment with ldap, ftp, smtp, pop3, traditional unix boxes etc .... You've already got the key to that solution (LDAP). Do you mean things like provisioning and credential management? I've not used it, but you might want to look at FreeIPA. Although it uses KDC at the core, IIRC you can have LDAP-only clients authenticate to it. Once you have the core, then you need to look at the service-specific docs (your ftp server, MDA, etc) as to how to wire them into LDAP. Of course, with that many machines I hope you're already using some kind of automated provisioning for at least configuration (puppet, cfengine, etc). Devin
