UNIX for Advanced & Expert Users

I am supporting a little over 300+ servers, mostly Solaris with a handful of AIX and HPUX. Currently each box has its own sudoers file that is different. I have ran a script and captured each sudoers file. Our goal is to have 1 common sudo file on a trusted host and then only have to edit that file and then run a script to scp it to the other servers. Rsync is not an option. First I having trouble find a text file migration tool, anyone know of any good ones? 2nd is there a better way to do this that is not to involving as we are implementing Centrify in about 6-9 months?

First, does it work that all hosts have the same sudoers? Aren't there different needs for each host like filename which is allowed or is it always localhost etc.?

What do you mean with a "text file migration tool" ??

Maybe a shell script working a textfile with the hostnames, scp'ing everything for distribution is an option.

I don't know Centrify but sounds like a central host management tool. Solely up to you if you want to do something before you get Centrify. Usually such a script is done quick and with some testing you might just need some hours, coffee break counted in. So it's your decision.

Not all hosts have the same users and sudoers options. If a user does not need sudo option, 1. they more than likely don't have an account and 2. we have about dozen or so sudo groups that match a generic user id on the host. There for if the sudo file is on a machine where that user doesn't need access 1 they probably can't even log in and 2 if they do there sudo group id won't work.

I have collect my 300+ sudoers files and put them on my laptop each in a separate text file. I just need to make sure that everyone that is in the sysadmin group from the 300 servers is in the common sudo file the same with our dba sudo group ect....


Make sense?

If that fits your needs, it makes sense, I think
Adding the entry for this group on that 300 files could be done with a for loop and sed for example. You alter the files, write them to a tmp name and move it back over the original. Test it out before you go on your life data.

I had the same problem
with sudo some years back and I came accross
this tool
lf278, SystemAdministration: Automating system administration with ssh and scp

see if it can help you
Dan