Re: Access to nfs server, Part 2

Hi-

I believe that using sudo to give the developer access to what ever
commands he needs to run should prevent the 'su - <username>' trick.  I
am always leery of giving someone root access to any machine on my
network if I don't trust him on EVERY machine.

I hope that helps,
Kevin


On Wed, 2004-07-21 at 03:41, Markus Korth wrote:
> HiHo!
> 
> I've read the recommendations concerning access to a nfs server by changing the system and now want to ask for hints for a different situation:
> 
> What if you have homes and group shares automounted, user management in ldap and then need to give root access to a developer on one machine? Even if playing with root_squash options this developer still can do a
> su - <different_user>
> as root and then access all this users files.
> 
> The only solutions I can think of at the moment seems to be kerberos?! Any ideas?
> 
> Markus