Hi All,

The following situations are given:

a)
We want to manage keytab files. Keytab files are owned by users
(system users used for running services...). Currently the
distribution of these files is solved with a recusive file resource
and the puppet file server. The drawback is that the preparation of
these keytab files is a "manual" process, or at least not managed by
puppet. One of the problem is that the keys that are stored in the
keytab files must be created once but have to be pushed the multiple
servers.

I wonder if there is a theory or best practice how to handle such
situations better/more integrated with puppet?

The other problem might be is that the creation of the keys and the
keytab files might fail at different points through multiple steps.  I
wonder what would be the best way to "communicate" with the the user
who e.g. executes puppetd? This is because this resource (the keys) is
actually external to some extent, because these are actually have to
be created on not puppet managed(external) hosts.

b)
Another use case could be if we wanted to manage e.g. volumes&exports
on NAS appliances. Of course puppetd won't run on the appliance,
however it could ssh or communicate via some API. Do you have any idea
or experimented with anything like that with puppet?

I think that the above could benefit from having a clear definition db
built upon normal puppet language constructs describing the resources
and their relations, but I am afraid that puppet is not designed with
this in mind. I especially can't imagine how could puppet provide
appropriate feedback. One might say that this should be done by and ad-
hoc management tool like Func but it lacks the recorded and verifiable
definition that puppet is great at.

Thanks,
/Bela
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to