On Aug 2, 2010, at 5:00 AM, Mike DeMarco wrote: >> This is a variant of the convenience argument. >> Systems with root as a >> ole require a local user account with Primary >> Administrator role. When >> I installed OpenSolaris it did the right thing and >> created such an >> account that does not depend on NIS or LDAP and is >> thus insulated from >> issues with those servers. That user account should >> only have local >> paths in the PATH and a local home directory for >> greater reliability. > > Why do you believe root should be a role?
I suspect the line of thinking went something like this: - We've been telling people for a while not to log in as root. - They keep logging in as root anyway. - We'll make it so they *can't* log in as root. That'll learn 'em. ;) I'm not totally against this; in fact, root is still a role on my systems. It does lead to some unexpected consequences you have to think through if you use network authentication, is all. -- David Brodbeck System Administrator, Linguistics University of Washington _______________________________________________ opensolaris-discuss mailing list [email protected]
