diff options
author | Sol Jerome <solj@ices.utexas.edu> | 2009-12-29 04:19:02 +0000 |
---|---|---|
committer | Sol Jerome <solj@ices.utexas.edu> | 2009-12-29 04:19:02 +0000 |
commit | bd0204ecb1fb80cdf36af0f57b72e84445c1a088 (patch) | |
tree | 930345633221d9fda156140fb494d739a0484f85 /doc/plugins/generators/account.txt | |
parent | d61a93ac7451be4eedb07f93d507b67d6af7b025 (diff) | |
download | bcfg2-bd0204ecb1fb80cdf36af0f57b72e84445c1a088.tar.gz bcfg2-bd0204ecb1fb80cdf36af0f57b72e84445c1a088.tar.bz2 bcfg2-bd0204ecb1fb80cdf36af0f57b72e84445c1a088.zip |
doc: Rearrange plugin document structure
Signed-off-by: Sol Jerome <solj@ices.utexas.edu>
git-svn-id: https://svn.mcs.anl.gov/repos/bcfg/trunk/bcfg2@5636 ce84e21b-d406-0410-9b95-82705330c041
Diffstat (limited to 'doc/plugins/generators/account.txt')
-rw-r--r-- | doc/plugins/generators/account.txt | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/doc/plugins/generators/account.txt b/doc/plugins/generators/account.txt new file mode 100644 index 000000000..e07cef8b6 --- /dev/null +++ b/doc/plugins/generators/account.txt @@ -0,0 +1,24 @@ +.. -*- mode: rst -*- + +======= +Account +======= + +The account plugin manages authentication data, including + +* /etc/passwd +* /etc/group +* /etc/security/limits.conf +* /etc/sudoers +* /root/.ssh/authorized_keys + +User access data is stored in three files in the Account directory: + +* superusers (a list of users who always have root privs) +* rootlist (a list of user:host pairs for scoped root privs) +* useraccess (a list of user:host pairs for login access) + +SSH keys are stored in files named $username.key; these are installed into root's authorized keys for users in the superusers list as well as for the pertitent users in the rootlike file (for the current system). + +Authentication data is read in from (static|dyn).(passwd|group) The static ones are for system local ones, while the dyn. versions are for external synchronization (from ldap/nis/etc) +There is also a static.limits.conf that provides the limits.conf header and any static entries. |