Hacker News Reader

For OS level auth, you'd want to use sssd, which will handle most failure conditions:

https://fedorahosted.org/sssd/ https://wiki.ubuntu.com/Enterprise/Authentication/sssd

We actually create local accounts where possible via Puppet i.e. on Linux hosts. That way we can draw from the same set of credentials in Hiera and ensure presence/absence on all systems.

It's not such a big problem on a Linux host - it's more of a problem on network hardware.

ldap & tacacs+ solves that issue

Reply on news.ycombinator.com