This is an automated archive.
The original was posted on /r/sysadmin by /u/CACodeBro on 2024-01-24 02:58:15+00:00.
Just curious how you folks are managing multiple administrators on say 30 Linux servers.
Currently I'm using Ansible to keep SSH keys updated across all servers for a generic shared "admin" account that is a member of sudoers. The main drawback to this is I lose granular auditing. I can see who SSH'd and from what host, but no direct link of command to user.
I'd like to create individual accounts on all the boxes...whether local or LDAP, but how do you deal with modification of files that expect to be owned by root? I don't like the idea of changing permissions of something like an nginx directory.
Just wondering how you folks are handling this?