News for hackers. Stuff that matters.

A comment on Ask HN: How are credentials managed at your company?. Parent comment

Re:Ask HN: How are credentials managed at your company? by icebraining on Wednesday August 31, 2016 @08:21AM (#12397706)
Sounds awesome. How do you use sudo? Just plain NOPASSWD and trust the SSH auth?
[ Parent | on HN ]
Re:Ask HN: How are credentials managed at your company? by Annatar on Wednesday August 31, 2016 @10:15AM (#12398436)
Sudo is in LDAP. We are allowed to run specific commands based on which roles we are in. Those roles are used to generate sudo roles.

Nobody, including 2nd level UNIX support, has or knows what the root password is.

If there is an emergency, the sysadmins can temporarily generate a root password, which is then automatically reset with random garbage after a few hours, so nobody will know what it is after that.

[ Parent | on HN ]