Re: Thoughts on Cobbler authorization/authentication and access levels in your organization?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Michael,

Here at NCSU I have an existing provisioning system that generates
kickstarts based on a set of "keyword [value [value...]]" rules.  We'd
like to continue to use that as it works well for us...and it integrates
with Cobbler well.

So given that, admins already have the ability to control/alter their
profiles in a defined way that scales well and lonely me can support.  

What I'd like from Cobbler is the ability for a select few admins (like
me) to be able to setup all the bits to make Cobbler distros/profiles
etc. work.  

Normal admins should be able to associate a MAC address with a profile
and remove said MAC.  Actually, it would be great if an admin could
associate a hostname/IP address with a profile and Cobbler would run a
plugin to translate that into a MAC.

Groups of admins as well.  Any admin can modify MAC->profile of any
other admin provided both are in the same group.

Authentication via kerberos (PAM probably) authorization done by auto
generated groups of admins (a plugin)?

Okay...some half-baked ideas about how I see a workflow here.  If you
have questions please feel free.  

Jack Neely
-- 
Jack Neely <jjneely@xxxxxxxx>
Linux Czar, OIT Campus Linux Services
Office of Information Technology, NC State University
GPG Fingerprint: 1917 5AC1 E828 9337 7AA4  EA6B 213B 765F 3B6A 5B89

_______________________________________________
et-mgmt-tools mailing list
et-mgmt-tools@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/et-mgmt-tools

[Index of Archives]     [Fedora Users]     [Fedora Legacy List]     [Fedora Maintainers]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [KDE Users]     [Fedora Tools]

  Powered by Linux