Neil, Absolutely, that's my primary focus. The hard part is for everyone to always know (or easily find out) what's under Cfengine control for those emergency moments when the change control process gets "overlooked" and manual changes are made. Ideally, that wouldn't happen. Realistically...
Thanks, Justin -----Original Message----- From: nwat...@symcor.com [mailto:nwat...@symcor.com] Sent: Monday, February 01, 2010 12:08 PM To: Justin Lloyd Cc: help-cfengine@cfengine.org; help-cfengine-boun...@cfengine.org Subject: Re: Team-based Cfengine Management I've found that this is often an education process. Folks need to be aware that Cfengine is the authority for certain services and files. Once I had to combine a Cfengine deployment with a hostmaster who maintained DNS records through Bind. I wrote a Cfengine policy to watch over Bind files and keep the service up. I then checked the Bind files into a Subversion repository. The hostmaster could make his Bind edits check them into the Subversion. Cfengine would pick up the changes and production hosts would get them. Sincerely, -- Neil Watson 416-673-3465 This electronic communication and any attachments may contain confidential and proprietary information of DigitalGlobe, Inc. If you are not the intended recipient, or an agent or employee responsible for delivering this communication to the intended recipient, or if you have received this communication in error, please do not print, copy, retransmit, disseminate or otherwise use the information. Please indicate to the sender that you have received this communication in error, and delete the copy you received. DigitalGlobe reserves the right to monitor any electronic communication sent or received by its employees, agents or representatives. _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine
