[chef] Re: Managing passwords on multiple webapp/users creation

[Noah Kantrowitz < >]

Depending on the app many support LDAP either directly or via HTTP 
authentication + mod_authnz_ldap (or similar for non-apache servers). That is 
usually your best bet for centralized auth in various web apps and also works 
nicely for ssh users.

--Noah

On Jan 4, 2013, at 1:57 AM, Philippe Bérard wrote:

> Hello everyone,
>  
> I would like to know if anyone has already managed to deploy multiple 
> users/webapps on servers via CHEF and, therefore, how they’ve managed 
> password generation and storage.
>  
> I’ve actually written a recipe which creates users and deploy a webapp for 
> each of them, by reading a databag. I’m generating the password during 
> user’s creation and storing the password in the original databag. Of 
> course, this method is completely insecure.
>  
> I’ve tried to use encrypted databags but this kind of databag can’t be 
> written by a recipe, only read. BTW, SSH keys wouldn’t be of any help 
> because there are too many persons who would have to integrate these keys 
> on their machines.
>  
> Thanks in advance for any help.
>  
> Regards,
>  
> Philippe Bérard
> Responsable informatique
> Tel : +33 (0)1 39 23 31 17
> Mob : +33 (0)6 01 27 87 86
> Fax : +33 (0)1 39 55 47 56
> 58, Rue Pottier
> 78150 Le Chesnay
> www.jalios.com
> <image001.gif>
> P Afin de contribuer au respect de l'environnement, merci de n'imprimer ce 
> message qu'en cas de nécessité. 
>  
>