Group based users creation best practices?
I am working to implement Puppet in our infrastructure.
We will be using RedHat Satellite 6 for the deployment of new servers (foreman backend)
What are the best practices to create the user accounts in these systems?
Here are my "requirements"
- All systems have a subset of accounts created (sysadmins and base services)
- Group based accounts to be created (for example: a server in group "Database" will have the DBA accounts created but all other servers will not have these accounts created)
- Some accounts have ssh keys files
What are the best practices to create users accounts based on "groups" when provisionning servers with Puppet?