3 ms·
It's less about paranoia, and more about reducing change operations on hosts. Why should I constantly update each host with information about who can access wha
by subway 10y ago
It's less about paranoia, and more about reducing change operations on hosts. Why should I constantly update each host with information about who can access what resource with which credentials, when I can configure them a single time to delegate access control to a directory service?
- sliken 10y agoDespite the best intentions I've seen quite a few organizations crippled by having a directory service die. I'd much rather have a push based service (like configuration management) where downtime means people can't change their passwords. Having every login fail because a directory service is down seems silly. Not like the mapping of users <-> systems is particularly large, even for the largest organizations.
- subway 10y agoDo you take the same approach with DNS?