Hi all,

I'm currently migrating a lot of things that I would formerly have done with sudo to use RBAC on my SmartMachines and hypervisors. In LDAP, I set a user's SolarisProfAttr attribute to, eg, make uid=hile (me) have the role Primary Administrator. How are people handling the cases where these data are stored in LDAP, but users need different classes of access on different types of systems? For example, one might give a web developer the Primary Administrator role on his two or three personal dev machines, but on the production cluster, he should likely only have access to manage web-specific processes.

Thanks
-c
--
Coy Hile
[email protected]


-------------------------------------------
smartos-discuss
Archives: https://www.listbox.com/member/archive/184463/=now
RSS Feed: https://www.listbox.com/member/archive/rss/184463/25769125-55cfbc00
Modify Your Subscription: 
https://www.listbox.com/member/?member_id=25769125&id_secret=25769125-7688e9fb
Powered by Listbox: http://www.listbox.com

Reply via email to