[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: cfengine and hosts using DHCP
From: |
Mark . Burgess |
Subject: |
Re: cfengine and hosts using DHCP |
Date: |
Sat, 27 Apr 2002 16:32:26 +0200 (MET DST) |
I don't know anything useful about LDAP. I have never seen
a presentation which answered any questions I had about it
If you have specific suggestions...otherwise I try to
avoid gratuitous use of other technologies as much as possible.
M
On 27 Apr, John Sechrest wrote:
>
>
> While you are looking at how cfengine works with DHCP....
>
> It might be a worth while effort to take the next step, and
> look at what it would look like for CFengine to get some of its
> data out of LDAP.
>
> If you have your authentication for your systems running
> out of ldap, it might be worth while to be able to
> use LDAP as a configuration database too.
>
> It provides security models and pre-existing tools to access
> the system.
>
>
>
> Mark.Burgess@iu.hio.no writes:
>
> %
> % This is a good poiny which I had not really considered up to this point.
> % here needs perhaps to be an option on cfservd which allows one to
> % specify a DHCP range. I shall look into this
> %
> % M
> %
> % On 27 Apr, Juha Ylitalo wrote:
> % > Current mode in cfservd <-> cfagent interaction seems to be based on
> % > idea that both parties have static IP and they have been introduced to
> % > each others at some point by administration.
> % > Are there any best practises on how to use cfengine in environments were
> % > you have mixed environment of static and DHCP addresses (i.e. Linux/*BSD
> % > workstations and laptops), where your cfservd or other central file
> % > repository can give all its configuration files
> % > (/var/cfengine/masterfiles/inputs/*), but clients should somehow be able
> % > to verify that downloaded files came from trusted source?
> % > I guess I could create script that would download PGP signed tarballs,
> % > verify signature and then untar them to /var/cfengine/inputs, but if
> % > there are better solutions, I would like to hear about them.
> % >
> %
> %
> %
> % ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> % Work: +47 22453272 Email: Mark.Burgess@iu.hio.no
> % Fax : +47 22453205 WWW : http://www.iu.hio.no/~mark
> % ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> %
> %
> %
> % _______________________________________________
> % Help-cfengine mailing list
> % Help-cfengine@gnu.org
> % http://mail.gnu.org/mailman/listinfo/help-cfengine
>
> -----
> John Sechrest . Helping people use
> CTO PEAK - . computers and the Internet
> Public Electronic . more effectively
> Access to Knowledge,Inc .
> 1600 SW Western, Suite 180 . Internet: sechrest@peak.org
> Corvallis Oregon 97333 . (541) 754-7325
> . http://www.peak.org/~sechrest
>
> _______________________________________________
> Help-cfengine mailing list
> Help-cfengine@gnu.org
> http://mail.gnu.org/mailman/listinfo/help-cfengine
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Work: +47 22453272 Email: Mark.Burgess@iu.hio.no
Fax : +47 22453205 WWW : http://www.iu.hio.no/~mark
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~