Centralized Authentication Proposal

While implementing the BCFG2 configuration management system on the build farm, the prospect of having a passwd, shadow and group file controlled by the utility was brought up several times. While this is one method of managing a consistent set of users and groups across the build farm, I feel that there is other software available that would be better suited for this task.

Arguments For

• More easily managed users
• consistent home directories over NFS
  • SSH keys always there
  • Test builds stored on network drive/doesn't take up space on builders
• More modern approach to user management
• Less inconsistencies throughout builders

Arguments Against

• Additonal services running on Honkgong
• Increased network traffic
• additonal point of failure

Means and methods

NIS/NIS+

• Pros
  • Quick and easy
• Cons

OpenLDAP/389 Directory

• LDAP is an industry standard
• Extensible
• Fine Grained