Web Server Users - Best Practice
- by Toby
I was wondering what is considered best practice when several developers/administrators require access to the same web server.
Should there be one non-root user with a secure username and password unqiue to the web server which everyone logs in as or should there be a username for each person.
I am leaning towards a username for each person to aid in logging etc however then does the same user keep the same credentials over several servers, or should at least their password change depending on the server they are on?
Should any non-root user of the system be added to the sudoers file or is it best practice to leave everyone off it and only let root perform certain tasks?
Any help would be greatly appreciated.