Solved

recommend secure & efficient Unix LDAP (equiv of Windows AD)

Posted on 2016-08-15
6
113 Views
Last Modified: 2016-08-19
UNIX ID Management/Administration is one of the most tedious job since we have to login interactively to each of the server when there is a request to create/delete a sysadmin (or apps support) user in the hundreds of Unix servers.

We have AIX, Sparc Solaris 10 & 11 & a few Solarix Intel & a few RHEL : almost all of them are physical ie non-VM.

Our compliance privileged user management & access tool is CyberArk (ie sysadmins have to go thru it)

A few options:

a) have a centralized tool like HPSA or Nagios which we could centrally send a "useradd" or "userdel" command
     to the servers : but this is not as good as wintel AD-like solution because accounts are still locally created
     & every 60-90 days have to login manually by the owners to change password.
     Also, in Solaris, root accounts that expire will cause root cron jobs to fail

b) years ago I heard of Sun's NIS+ solution but this can't be used with AIX & RHEL or can it?

c) solution must not have adverse impact or unwieldy to apps like Oracle DB, Oracle Financials,
    TripWire, Netbackup
0
Comment
Question by:sunhux
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 40

Accepted Solution

by:
omarfarid earned 500 total points
ID: 41757380
0
 

Author Comment

by:sunhux
ID: 41757622
Will NIS solution ease the issue of expired root causing root cron jobs to fail in Solaris,
such as allowing us to change root password centrally?
0
 

Author Comment

by:sunhux
ID: 41757624
Can oracle, tripwire & Netbackup accounts be migrated from local accounts
to NIS accounts without the need to reinstall these apps?
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 40

Assisted Solution

by:omarfarid
omarfarid earned 500 total points
ID: 41757634
Are you refereeing to OS accounts or application / DB accounts?

OS accounts (usernames) can be.
0
 
LVL 40

Assisted Solution

by:omarfarid
omarfarid earned 500 total points
ID: 41757637
to answer your other question, users will be managed centrally.
0
 

Author Comment

by:sunhux
ID: 41757680
I'm referring to OS accounts (eg: oracle that could be found in /etc/passwd)


Internally, some parties prefer to use a Wintel solution;  is there any product that
runs on Wintel that could perform such UNIX LDAP for AIX, Solaris & RHEL?
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

OfficeMate Freezes on login or does not load after login credentials are input.
Google Drive is extremely cheap offsite storage, and it's even possible to get extra storage for free for two years.  You can use the free account 15GB, and if you have an Android device..when you install Google Drive for the first time it will give…
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
How to Install VMware Tools in Red Hat Enterprise Linux 6.4 (RHEL 6.4) Step-by-Step Tutorial

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question