Probably a simple question, but I can't seem to find any actual best practices out there. I manage a handful of servers and I am really getting sick of tracking my passwords in pwsafe. I've been considering implementing using SSH keys for authentication, rather than passwords but I have concerns about the best way to implement sudo rights to users in that case.
I know a lot of people modify /etc/sudoers to have and set their needed users to NOPASSWD. But I see no mention of people giving their users passwords, so I have a hard time doing that. What if my box is owned as a non-privileged user, all it would take is a quick 'su user' into my NOPASSWD'd user and I'd be done for, in theory. Or worse yet, physical access and someone who knows my username.
Is it best practice to go ahead and set a password on those accounts, or are there some other mechanisms used such as preventing local logins or do people just set a password and throw it away/never use it?