We have 15 Debian servers and growing.
What's a simple, lightweight method for centralizing user management? Use cases would be adding a user across all servers, tweaking a users access on a specific server(s), removing a user from all servers.
LDAP is an option but seems too full on for my needs. I'd rather something with the simplicity of useradd/groupadd, just spread across multiple machines. Web interface would be nice but not necessary. Git interface could be really cool.
Best Answer
There's several options, but it largely depends on your goals. LDAP is a lot more "light-weight" than you think. It's name is "Lightweight Directory Access Protocol" after all. A lot of it's "bulk" comes in when you add extra stuff to it. Of course, you can use almost anything to centralize authentication when it comes to *nix flavored OSes with PAM. Even a flat-text file if you so choose. Kerberos is another option... Radius... Samba/Active Directory... the list goes on. The biggest question is... how much do you want it to do... and what do you want from it?