Re: Number of Admin's per Server

From: Mxsmanic (mxsmanic_at_hotmail.com)
Date: 02/05/05

  • Next message: V Crenshaw: "Re: Number of Admin's per Server" 
    Date: Sat, 05 Feb 2005 23:09:22 +0100

    V Crenshaw writes:

    > Have you seen in any of the industry mags with a survery or article that
    > talks about the
    > optimum number of unix or AIX admins per server?

    Unless the workload is very heavy, a single administrator should be
    optimal. For mission-critical machines, two people with root access
    would probably be wise (although only one might normally carry out all
    the administration duties).

    For large systems and in cases where responsibility must be divided for
    security reasons, you might want several administrators with different
    duties. The UNIX architecture doesn't lend itself to this, though,
    since you're either root or you're not, so it's all or nothing as
    privileges go. There are some creative workarounds, but they involve
    allowing ordinary users to run a few privileged programs; the only real
    administrators are those with the root password, and anyone with the
    root password can do anything.

    One of the problems I've always had with UNIX is this all-or-nothing
    sysadmin privilege, but it's a problem shared by a great many operating
    systems. 

    -- 
Transpose hotmail and mxsmanic in my e-mail address to reach me directly.
  • Next message: V Crenshaw: "Re: Number of Admin's per Server"

    Relevant Pages

    • Re: List of privileges for the Administrators group
      ... This is based on the security descriptor for that object and not ... CreateFilecall is run in an 'Administrators' group it will succeed. ... 'Administrators' permissions. ... New privileges are sometimes released with OS updates and/or new OS ...
      (microsoft.public.platformsdk.security)
    • Re: List of privileges for the Administrators group
      ... CreateFilecall is run in an 'Administrators' group it will succeed. ... 'Administrators' permissions. ... New privileges are sometimes released with OS updates and/or new OS ... user account, and the name of the domain on which the account was ...
      (microsoft.public.platformsdk.security)
    • Re: Elevated Privileges
      ... Two clients need to work with Access - I'm talking ... them administrators rights let them work with Access. ... I thought the elevated privileges ... >>install programs with so called 'elevated privileges'. ...
      (microsoft.public.windows.server.sbs)
    • Re: Compromise of the nobody account?
      ... "nobody" would normally be seen during the wee hours, ... or unknown security hole. ... UNIX is meant to be "professionally maintained", ... expecting them to be experienced system administrators is a bit much. ...
      (comp.security.unix)
    • Re: List of privileges for the Administrators group
      ... A security descriptor describes who has access to an object and what ... 'Administrators' ... full Administrators permissions. ... New privileges are sometimes released with OS updates and/or new OS ...
      (microsoft.public.platformsdk.security)