On: Power Up Your Authentication with Open LDAP and Puppet

[doxcf434]

For OS level auth, you'd want to use sssd, which will handle most failure conditions:

https://fedorahosted.org/sssd/ https://wiki.ubuntu.com/Enterprise/Authentication/sssd

[seanhandley → doxcf434]

We actually create local accounts where possible via Puppet i.e. on Linux hosts. That way we can draw from the same set of credentials in Hiera and ensure presence/absence on all systems.

[seanhandley → doxcf434]

It's not such a big problem on a Linux host - it's more of a problem on network hardware.

[jasonrojas → seanhandley]

ldap & tacacs+ solves that issue