infra-puppet/local-modules/user-commands
R. Tyler Croy 744f35a751 Move all our local modules into a local-modules/ tree so librarian-puppet can own modules/ 2013-06-30 19:44:43 -07:00
..
files Move all our local modules into a local-modules/ tree so librarian-puppet can own modules/ 2013-06-30 19:44:43 -07:00
manifests Move all our local modules into a local-modules/ tree so librarian-puppet can own modules/ 2013-06-30 19:44:43 -07:00
README.txt Move all our local modules into a local-modules/ tree so librarian-puppet can own modules/ 2013-06-30 19:44:43 -07:00

README.txt

This module allows our 2nd tier admins to execute specific set of administrative commands
(those defined as files/commands/*) on our servers without having the interactive shell
access.

The restricted nature of this mode allows us to hand out the access to a larger number of
audience to streamline the maintenance/administrative tasks.

New users can be added via manifests/init.pp. The command option must have the user name
as the first argument. The idea is to use this to further restrict access in the future.