4 ms·
And when you do then 'prod' and 'root' work just fine. They do until you have to show auditors who logged in and when. Scattering user-accounts across machine
by bdunbar 14y ago
And when you do then 'prod' and 'root' work just fine.
They do until you have to show auditors who logged in and when.
Scattering user-accounts across machines is a maintenance headache
That's why God invented Active Directory.
- moe 14y agoThey do until you have to show auditors who logged in and when. SSH has logging. Also if you have audit-requirements then the login-log is normally the least of your worries. That's why God invented Active Directory. That must be one cruel god you have there...
- bdunbar 14y agoI agree that SSH logging is sufficient. That was not the finding of our auditor, per best practices, blah blah. Thank SOX for that one. That must be one cruel god you have there... I don't have to _deal_ with it directly, just use it to authenticate logins on (most) of my unix servers. Seen from afar, it's not that bad. Now, she is a jealous god, as perceived by her acolytes. Nobody really wants to hear about how, during last year's DR testing at IBM, my stuff was up and running waaay before AD was working.