...NOT!
41 karma · joined July 21, 2009
...NOT!
you should be hearing from someone soonish.
So yeah, take it with a grain of salt.
I called to ask if there was a way and the dude I talked to actually insinuated that I had not taken time to read the documentation. WTF?
Apparently that requirement was a "feature" -- they assumed that a bug entered manually did not require correspondence.
Yes, I was told that as well.
Eight miles is more than a couple.
I found it in a bunch of office junk that we had in storage. Everyone else at work sits in cheap Ikea chairs, sadly.
It's a great chair.
What I mean is that in order to manage user accounts, the management tool (Puppet) will have to know what the encrypted password is so it can insert it into /etc/shadow. Otherwise you have no password and must rely on NOPASSWD in sudoers if you want to log into that managed machine and use sudo.
If the system doesn't have a password for you in /etc/shadow, sudo can't authenticate you via getpwent or whatever.
So your only two options are to write a tool for users to update their password in Puppet directly/indirectly, or allow NOPASSWD and religiously check for empty passphrases on SSH keypairs.
So the problem I have with this is that it collides with using Puppet to manage your users--Puppet will have to know about the users' Unix passwords.
It should be fairly straightforward to write a script that tests for SSH keypairs with an empty passphrase, simply try to authenticate an SSH agent by loading the user's key.
If you're going to firewall SSH, changing the port is redundant.. The only reason to change the port is to prevent brute force attacks, and the firewall will do that for you.
Equivalent networking and social opportunities exist in plenty other areas of life that don't cost you tens or hundreds of thousands of dollars.
---
... are worth $100k+ in total??
Case in point: http://www.youtube.com/watch?v=geIsWq5xOSE
Scraper bikes are all over Oakland. Do they look cool? Nope.
I would buy a Segway if it looked like something from Mad Max.