manager sudo file

[Rick Stevens]

On 03/15/2010 04:04 PM, Tom H wrote:
>>> Rather than create different /etc/sudoers for each box, can't you use
>>> a name service (with>1500 boxes you must already have one running)
>>> and set up netgroups for users, commands, boxes, and auths?
>
>> Yes, name service (DNS) is running but not supported by my department.
>> This infrastructure has grown into what it is now for long time. I am
>> trying to straighten it out.
>
> By "name service," I meant NIS, NIS+, LDAP.

I second that.  You have to join the 21st century sometime.  LDAP is
a good choice AND you can manage the sudo file from it as well (a thing
I've found VERY useful).

NIS was invented by Sun, NIS+ expanded upon it.  Almost all Unixish
systems will support NIS/NIS+.  Most will support LDAP (Solaris, Linux,
FreeBSD, HP/UX for sure).
----------------------------------------------------------------------
- Rick Stevens, Systems Engineer, C2 Hosting          ricks at nerd.com -
- AIM/Skype: therps2        ICQ: 22643734            Yahoo: origrps2 -
-                                                                    -
- If at first you don't succeed, quit. No sense being a damned fool! -
----------------------------------------------------------------------