[Freeipa-users] IPA - initial questions

[Herb Burnswell]

Rob,

Thank you for your response.  One of my filters on gmail was blocking the
approval responses, I should have known it was user error ;-).  I'm all set
on the subscription.  Also, thanks for the tip on searching google that
way, I'll investigate questions that way.

Regarding root user, that was what I was thinking.  So that kind of takes
away the ability to centrally manage the root password for 100's of systems
via IPA correct?  Or is there a way to do that?

thanks,

Herb


On Fri, May 10, 2013 at 11:22 AM, Rob Crittenden <rcritten at redhat.com>wrote:

> Herb Burnswell wrote:
>
>> All,
>>
>> I am beginning to put an IPA environment together and will be inquiring
>> with the community on different issues.
>>
>> First, regarding this list, I do not see a way to search archived posts
>> for answers.  I apologize if I am just missing how to do so, is there a
>> way to search for topics?
>>
>
> There is no built-in search command but you can use google, something like
> site:https://www.redhat.com/**archives/freeipa-users/<https://www.redhat.com/archives/freeipa-users/><search-terms>
>
>
>  Second, I have attempted to subscribe to the list a couple times but
>> have not received any email notification and cannot log in via the
>> credentials I created.  Am I missing something or am I just waiting for
>> an approval from moderators or other?
>>
>
> I don't see any failed subscription requests. I went ahead and subscribed
> you.
>
>
>  Regarding IPA, my initial question is how do folks handle the root
>> user?  Is root maintained via IPA centrally or since it's a special
>> account is it sill maintained directly on all systems?
>>
>
> You always want to be able to log in locally as root if something goes
> wrong. sssd purposely excludes the root users for this reason.
>
> If you want to limit root access then you'd be better of investigating
> SUDO and limiting who knows the root password(s).
>
> rob
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20130510/3e613219/attachment.htm>