Solved

recommend secure & efficient Unix LDAP (equiv of Windows AD)

Posted on 2016-08-15
6
126 Views
Last Modified: 2016-08-19
UNIX ID Management/Administration is one of the most tedious job since we have to login interactively to each of the server when there is a request to create/delete a sysadmin (or apps support) user in the hundreds of Unix servers.

We have AIX, Sparc Solaris 10 & 11 & a few Solarix Intel & a few RHEL : almost all of them are physical ie non-VM.

Our compliance privileged user management & access tool is CyberArk (ie sysadmins have to go thru it)

A few options:

a) have a centralized tool like HPSA or Nagios which we could centrally send a "useradd" or "userdel" command
     to the servers : but this is not as good as wintel AD-like solution because accounts are still locally created
     & every 60-90 days have to login manually by the owners to change password.
     Also, in Solaris, root accounts that expire will cause root cron jobs to fail

b) years ago I heard of Sun's NIS+ solution but this can't be used with AIX & RHEL or can it?

c) solution must not have adverse impact or unwieldy to apps like Oracle DB, Oracle Financials,
    TripWire, Netbackup
0
Comment
Question by:sunhux
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 40

Accepted Solution

by:
omarfarid earned 500 total points
ID: 41757380
0
 

Author Comment

by:sunhux
ID: 41757622
Will NIS solution ease the issue of expired root causing root cron jobs to fail in Solaris,
such as allowing us to change root password centrally?
0
 

Author Comment

by:sunhux
ID: 41757624
Can oracle, tripwire & Netbackup accounts be migrated from local accounts
to NIS accounts without the need to reinstall these apps?
0
Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

 
LVL 40

Assisted Solution

by:omarfarid
omarfarid earned 500 total points
ID: 41757634
Are you refereeing to OS accounts or application / DB accounts?

OS accounts (usernames) can be.
0
 
LVL 40

Assisted Solution

by:omarfarid
omarfarid earned 500 total points
ID: 41757637
to answer your other question, users will be managed centrally.
0
 

Author Comment

by:sunhux
ID: 41757680
I'm referring to OS accounts (eg: oracle that could be found in /etc/passwd)


Internally, some parties prefer to use a Wintel solution;  is there any product that
runs on Wintel that could perform such UNIX LDAP for AIX, Solaris & RHEL?
0

Featured Post

Are You Headed to Black Hat USA 2017?

Getting ready for Black Hat next week? Kick things off with the WatchGuard Badge Challenge and test your puzzle and cipher skills. Do you have what it takes to earn our limited edition Firebox Badge? Get started today - https://crimsonthorn.net

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In a recent article here at Experts Exchange (http://www.experts-exchange.com/articles/18880/PaperPort-14-in-Windows-10-A-First-Look.html), I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
Google Drive is extremely cheap offsite storage, and it's even possible to get extra storage for free for two years.  You can use the free account 15GB, and if you have an Android device..when you install Google Drive for the first time it will give…
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:
How to Install VMware Tools in Red Hat Enterprise Linux 6.4 (RHEL 6.4) Step-by-Step Tutorial
Suggested Courses

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question