root access when LDAP is inaccessible

View: New views
3 Messages — Rating Filter:   Alert me  

root access when LDAP is inaccessible

by Kent Tong :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi,

Suppose that a server is using ldap_pam to authenticate users. What if there is a network
problem or NIC problem preventing access to LDAP? Then root has to log in against the local
Unix passwd DB. As it is better to use sudo instead of directly logging in as root, it means
we have to create a normal user account locally for each administrator? This kind of defeats
the purpose of having LDAP.

How do you enable root access that still works when LDAP is inaccessible?

Thanks in advance!
--
Kent Tong
Better way to unit test Wicket pages (http://wicketpagetest.sourceforge.net)

Parent Message unknown Re: root access when LDAP is inaccessible

by wrogers :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

On Wed, Sep 10, 2008 at 10:40, Weston Rogers <wrogers@...> wrote:

> Just make sure root can access systems via console, and adjust
> console/login timeout settings appropriate, and it will work fine.
>
> Wes
>
> On Wed, Sep 10, 2008 at 06:10, Kent Tong <kent@...> wrote:
>>
>> Hi,
>>
>> Suppose that a server is using ldap_pam to authenticate users. What if there
>> is a network
>> problem or NIC problem preventing access to LDAP? Then root has to log in
>> against the local
>> Unix passwd DB. As it is better to use sudo instead of directly logging in
>> as root, it means
>> we have to create a normal user account locally for each administrator? This
>> kind of defeats
>> the purpose of having LDAP.
>>
>> How do you enable root access that still works when LDAP is inaccessible?
>>
>> Thanks in advance!
>>
>> -----
>> --
>> Kent Tong
>> Wicket tutorials freely available at http://www.agileskills2.org/EWDW
>> Axis2 tutorials freely available at http://www.agileskills2.org/DWSAA
>> --
>> View this message in context: http://www.nabble.com/root-access-when-LDAP-is-inaccessible-tp19410274p19410274.html
>> Sent from the PAM LDAP mailing list archive at Nabble.com.
>>
>>
>

Re: root access when LDAP is inaccessible

by Kent Tong :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi all,

Thanks for the replies. How about pam_ccreds? Has anyone used it?
--
Kent Tong
Better way to unit test Wicket pages (http://wicketpagetest.sourceforge.net)