Re: which programming language for server-side admin tasks

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



On Sun, Jun 14, 2009, Rudi Ahlers wrote:
>Hi,
>
>I would like to spend some time learning a new coding language, but
>specifically for server side admin stuff, i.e. setting up users / databases
>/ FTP accounts / virtual domains on Apache, etc.
>
We use python for most of the things we write now after having
used perl for about 15 years.

You may find that webmin is useful for this type of thing as it
can be configured to allow users to do pretty much anything, and
to limit what they can do.  On the other hand, IHMO it's written
in pretty ugly perl, and I have found some major problems (e.g.
happily removing the entire /home directory when changing a
user's $HOME with a type).  When we do set this up, we generally
restrict access to the local LAN and a very small set of public
IP addresses.

There is also a webmin companion program, usermin, which allows
users to do many of their own user maintenance functions.
Unfortunately I have seen it used in several cases to change
mail user's shell from /bin/false to /bin/bash then giving access
to the shell.  Again, this can be restricted to the private LAN
as webmin allows.

As for starting from scratch to do these things, it's probably a
better idea to take something that does most of what you want and
hack it to your needs.  As others have said, this can help avoid
the many pitfalls that one can find when doing security related
administrative tasks.  As an example, webmin allows one to
specify a post-processing python script for user administration,
and we provide one for our SMB customers that automatically updates
things like Samba and jive_messanger user info in a single step.

Bill
-- 
INTERNET:   bill@xxxxxxxxxxxxx  Bill Campbell; Celestial Software LLC
URL: http://www.celestial.com/  PO Box 820; 6641 E. Mercer Way
Voice:          (206) 236-1676  Mercer Island, WA 98040-0820
Fax:            (206) 232-9186  Skype: jwccsllc (206) 855-5792

During times of universal deceit, telling the truth becomes
a revolutionary act.  --George Orwell
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos

[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux