Solved

recommend secure & efficient Unix LDAP (equiv of Windows AD)

Posted on 2016-08-15
6
110 Views
Last Modified: 2016-08-19
UNIX ID Management/Administration is one of the most tedious job since we have to login interactively to each of the server when there is a request to create/delete a sysadmin (or apps support) user in the hundreds of Unix servers.

We have AIX, Sparc Solaris 10 & 11 & a few Solarix Intel & a few RHEL : almost all of them are physical ie non-VM.

Our compliance privileged user management & access tool is CyberArk (ie sysadmins have to go thru it)

A few options:

a) have a centralized tool like HPSA or Nagios which we could centrally send a "useradd" or "userdel" command
     to the servers : but this is not as good as wintel AD-like solution because accounts are still locally created
     & every 60-90 days have to login manually by the owners to change password.
     Also, in Solaris, root accounts that expire will cause root cron jobs to fail

b) years ago I heard of Sun's NIS+ solution but this can't be used with AIX & RHEL or can it?

c) solution must not have adverse impact or unwieldy to apps like Oracle DB, Oracle Financials,
    TripWire, Netbackup
0
Comment
Question by:sunhux
  • 3
  • 3
6 Comments
 
LVL 40

Accepted Solution

by:
omarfarid earned 500 total points
ID: 41757380
0
 

Author Comment

by:sunhux
ID: 41757622
Will NIS solution ease the issue of expired root causing root cron jobs to fail in Solaris,
such as allowing us to change root password centrally?
0
 

Author Comment

by:sunhux
ID: 41757624
Can oracle, tripwire & Netbackup accounts be migrated from local accounts
to NIS accounts without the need to reinstall these apps?
0
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

 
LVL 40

Assisted Solution

by:omarfarid
omarfarid earned 500 total points
ID: 41757634
Are you refereeing to OS accounts or application / DB accounts?

OS accounts (usernames) can be.
0
 
LVL 40

Assisted Solution

by:omarfarid
omarfarid earned 500 total points
ID: 41757637
to answer your other question, users will be managed centrally.
0
 

Author Comment

by:sunhux
ID: 41757680
I'm referring to OS accounts (eg: oracle that could be found in /etc/passwd)


Internally, some parties prefer to use a Wintel solution;  is there any product that
runs on Wintel that could perform such UNIX LDAP for AIX, Solaris & RHEL?
0

Featured Post

Master Your Team's Linux and Cloud Stack!

The average business loses $13.5M per year to ineffective training (per 1,000 employees). Keep ahead of the competition and combine in-person quality with online cost and flexibility by training with Linux Academy.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I. Introduction There's an interesting discussion going on now in an Experts Exchange Group — Attachments with no extension (http://www.experts-exchange.com/discussions/210281/Attachments-with-no-extension.html). This reminded me of questions tha…
Google Drive is extremely cheap offsite storage, and it's even possible to get extra storage for free for two years.  You can use the free account 15GB, and if you have an Android device..when you install Google Drive for the first time it will give…
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…
In a previous video, we went over how to export a DynamoDB table into Amazon S3.  In this video, we show how to load the export from S3 into a DynamoDB table.

860 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question