Tracy R Reed wrote:
I am using cfengine 2.1.16 on CentOS 4.3. I have machines on a local 192.168 network and machines with public ip's outside of our local network. I would like to be able to manage all of the policy from one place and keep all of the machines consistant both inside and out. It was recommended on #cfengine that I rdist the cfengine configs from the master policyhost on the 192.168 network to a machine on the outside network which would act as the policy host for the external machines. The trouble then becomes: How do I configure the update.conf and cfagent.conf files to use the appropriate policy host? We have separate dns for internal and external but all of our internal hostnames are required to end with int.mydomain.com and our externals are mydomain.com. So I cannot just make cfengine.mydomain.com a CNAME to the appropriate machines in the internal and external zone files and just have it work out. It would be nice if I could use the 192_168 class which gets defined to set the policyhost to my internal server otherwise set it to the external.

Any suggestions? Thanks!

Hi there,

you can do exactly what you suggest.
here would be a snippet from update.conf:

#----------------------------------------
AllowRedefinitionOf = ( policyhost )

!192.168::
   policyhost = ( host1.mydomain.com )
192_168::
   policyhost = ( host2.int.mydomain.com )
#----------------------------------------

I'm not sure if the different domain names would cause a problem, though.

Sincerely,
Jason



_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
http://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to