I'm looking for a clean way to centralize user management. The setup:
- About 10-30 linux machines (Ubuntu 10.04 LTS server)
- Maybe 10-30 users for now.
The requirements (hopes and expectations):
A single place for the administrator to manage user accounts, passwords and the list of machines each user has access to. (And probably groups.) Doesn't have to be fancy.
Single sign-on for SSH: the user should be able to login from machine A to machine B without re-entering his/her password.
A Quick Google searches give me pointers to OpenLDAP and Kerberos, but I'm not sure where to start and what problem will each solution actually solve. Which way to go? I'd love to find a clear tutorial that focuses on this subject. (Or: am I asking "a wrong question"?)