Friedrich Clausen wrote:
Does anyone have any real world, in the trenches experience they would be willing to share? I would like to know which is the most maintainable and easy to hand-over to more junior admins.
The way we did this was, we have an access.conf file that is automatically copied to every machine via a cron job. To give a netgroup access, you just make the change to the file in subversion, and it's automatically propagated a few minutes later.
It's kind of hacky, but it does work.
--Russell