[Freeipa-users] IPA and UIDS <500

[Innes, Duncan]

On Thu, 2012-07-19 at 07:36 -0400, Stephen Gallagher wrote:
> > On Thu, 2012-07-19 at 00:53 +0000, Steven Jones wrote:
> > > Actually its pam....unless IPA is as well.
> > > 
> > > Which makes sense then to have an application run < 500 so inherently it cannot be logged into via ssh....
> > 
> > Well, it's possible to configure your system to allow logging in to
> > users below 500, but it's not recommended. The real risk is of having
> > system services with an ID that conflicts with a user.
>
> In general we do not recommend to set ids on your own, let ipa choose
> IDs unless you have a constraint that prevents you from letting that
> happen.

Does this mean that it's impossible to have IPA authenticate the oracle user or any other user that is normally below 500?

Our security team is asking that we manage the passwords of oracle and other users centrally.  Can IPA do this for me?

Thanks

Duncan


Northern Rock plc is part of the Virgin Money group of companies.

This e-mail is intended to be confidential to the recipient. If you receive a copy in error, please inform the sender and then delete this message. 

Virgin Money Personal Financial Service Limited is authorised and regulated by the Financial Services Authority. Company no. 3072766. 

Virgin Money Unit Trust Managers Limited is authorised and regulated by the Financial Services Authority. Company no. 3000482. 

Virgin Money Cards Limited. Introducer appointed representative only of Virgin Money Personal Financial Service Limited. Company no. 4232392.

Virgin Money Management Services Limited. Company no. 3072772.

Virgin Money Holdings (UK) Limited. Company no. 3087587.

Each of the above companies is registered in England and Wales and has its registered office at Discovery House, Whiting Road, Norwich NR4 6EJ. 

Northern Rock plc. Authorised and regulated by the Financial Services Authority. Registered in England and Wales (Company no. 6952311) with its registered office at Northern Rock House, Gosforth, Newcastle upon Tyne NE3 4PL. 

The above companies use the trading name Virgin Money.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20120719/ded2475c/attachment.htm>