Research on Account Management System Based on Openldap and SUDO

During our daily management of server cluster, different administrators use the same account (usually root) and password to log on from different remote clients. So logs on servers couldnt trace specific operator once encountering security incident, for only administrator root was recorded. Therefore, its of great practical significance to discuss some new server access methods with multiple administration accounts. Considering the UNIX server cluster management of large enterprises, this paper provides a feasible solution of account management system based on Openldap and SUDO. This system establishes a strict behavior-monitoring framework of each servers operation commands and maintenance process.