Forum: Cfengine Help
Subject: Re: Question about keys and trust
Author: mlebel
Link to topic: https://cfengine.com/forum/read.php?3,16739,16754#msg-16754

Neil,

I just tried searching for nat and nothing came out.  Can you provided me with 
your proposition?

Mine is as follow:(untested and I am not sure that it would work)

Stop cfengine on all of my hosts
Clean up all of the keys found in the ppkeys directory of every single host
For each cluster 
   Create a public and private key on one designated host
   Copy these keys on every remaining host
End for each

restart cfengine on all host with trustkey enable in order for the exchange of 
keys to happen et voilĂ 

The thinking being that each node of a cluster should be considered as one big 
virtual host.

What do you think?


Marco

_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to