On Dec 29, 2008, at 5:33 PM, John Jasen wrote:
> Are you looking for any sort of single sign on, are you just looking  
> at

> centralizing account information and passwords, or are you looking at
> something else that requires kerberos?

Really just centralizing account information.  SSO would be a plus,  
but is not a requirement.

> Single sign on will be entertaining with UNIX systems, as AD doesn't
> understand service principal names in the expected way. Centralizing
> user info in AD can be done with tools that come relatively native  
> with
> solaris (10), Redhat (4 and 5), and Ubuntu (at least the last three
> versions).
>
> What are you aiming for? I'll be happy to pass along my notes and/or  
> my
> adventures in AD versus UNIX versus NFS.

This is mainly for CentOS servers so it should have the RHEL goodies  
you refer to.  As I mentioned above - SSO is not a requirement for  
this environment.
I'd love to see your notes and adventures.

I'd really like a solution that is relatively painless to install/ 
configure so I can train puppet how to take care of this for me (Still  
learning puppet).  Failing that I'm looking for a recipe that I can  
hand to a junior admin.  We've virtualized our environment here and  
our number of 'servers' is going to be exploding over the next year  
and I want to do everything I can to make building and maintaining  
large numbers of servers take less time.  Total # of (virtual) servers  
doubling this year is likely.

While shared home directories are not a requirement if we can  
accomplish this relatively painlessly it would not be a bad thing.   
The bulk of my staff all accesses a single admin server that they do  
their work from, so the few of us that need to roam around a lot more  
can handle using scp to move our own files around.

Thanks,


Neil Neely
http://neil-neely.blogspot.com


_______________________________________________
Tech mailing list
[email protected]
http://lopsa.org/cgi-bin/mailman/listinfo/tech
This list provided by the League of Professional System Administrators
 http://lopsa.org/

Reply via email to