Central Management?

[Lacoss-Arnold, Jason]

You might want to consider an SSL encrypted tunnel to a centralized LDAP
server to get the configuration.  That would seem a lot easier to me than
writing a whole API for transferring configuration settings.

-----Original Message-----
From: Howard Owen [mailto:hbo at egbok.com]
Sent: Monday, July 15, 2002 7:10 PM
To: sudo-workers at sudo.ws
Subject: Central Management?


A user of sudoscript contacted me asking about features he
thought would be useful. Specifically, he was interested
in central management of authorization, and remote keystroke
logging to a central server. This question piqued my interest.
I told him that the authorization feature was an issue for
sudo itself, since it would involve munging the sudoers files
on remote hosts. But the same administrative app that did that
work would be a natural place to control remote logging as
well. Both features would need an encrypted transport. SSH would
seem to be a natural for that.

Before I went off to design and code something along those lines,
I thought I'd ask to see if there were any prior work along
these lines. I'm also curious if anyone on this list might want
to contribute ideas and/or code to the (not yet born) project.
I'm a Perl hacker, so that would be my language of choice.

--
Howard Owen                      "Even if you are on the right
EGBOK Consultants                 track, you'll get run over if you
hbo at egbok.com    +1-650-339-5733  just sit there." - Will Rogers
____________________________________________________________ 
sudo-workers mailing list <sudo-workers at sudo.ws>
For list information, options, or to unsubscribe, visit:
http://www.sudo.ws/mailman/listinfo/sudo-workers


***********************************************************************************
WARNING:  All e-mail sent to and from this address will be received or
otherwise recorded by the A.G. Edwards corporate e-mail system and is
subject to archival, monitoring or review by, and/or disclosure to,
someone other than the recipient.
************************************************************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/sudo-workers/attachments/20020716/8c25894f/attachment.html>