Re: central administration techniques

2001-12-17 Thread Tollef Fog Heen
* nrvale0 | > maybe have a look at cfengine? | > or apt-cache search / freshmeat / google for other options | | I was down this road just a few months ago. cfengine is nice except | that the author doesn't believe that 'administrative information' is | something that should be protected and thus

Re: central administration techniques

2001-12-17 Thread Tollef Fog Heen
* nrvale0 | > maybe have a look at cfengine? | > or apt-cache search / freshmeat / google for other options | | I was down this road just a few months ago. cfengine is nice except | that the author doesn't believe that 'administrative information' is | something that should be protected and thu

Re: central administration techniques

2001-10-22 Thread Peter Cordes
On Fri, Oct 19, 2001 at 05:54:28PM +0300, Juha J?ykk? wrote: > I was wondering if there are any secure methods of centrally > managing the versions of certain files on Debian machines. The problem you describe (in the part of your email that I deleted) seems to be not wanting to give access to

Re: central administration techniques

2001-10-22 Thread Peter Cordes
On Fri, Oct 19, 2001 at 05:54:28PM +0300, Juha J?ykk? wrote: > I was wondering if there are any secure methods of centrally > managing the versions of certain files on Debian machines. The problem you describe (in the part of your email that I deleted) seems to be not wanting to give access to

Re: central administration techniques

2001-10-19 Thread Vineet Kumar
* Juha J?ykk? ([EMAIL PROTECTED]) [011019 07:57]: > I was wondering if there are any secure methods of centrally > managing the versions of certain files on Debian machines. I currently > have a woody, two sids and several potatos which need to be kept up to > date. The security patches are not m

Re: central administration techniques

2001-10-19 Thread Petro
On Fri, Oct 19, 2001 at 09:41:22AM -0700, nrvale0 wrote: > > maybe have a look at cfengine? > > or apt-cache search / freshmeat / google for other options > > I was down this road just a few months ago. cfengine is nice except > that the author doesn't believe that 'administrative information' is

Re: central administration techniques

2001-10-19 Thread Vineet Kumar
* Juha J?ykk? ([EMAIL PROTECTED]) [011019 07:57]: > I was wondering if there are any secure methods of centrally > managing the versions of certain files on Debian machines. I currently > have a woody, two sids and several potatos which need to be kept up to > date. The security patches are not

Re: central administration techniques

2001-10-19 Thread nrvale0
> maybe have a look at cfengine? > or apt-cache search / freshmeat / google for other options I was down this road just a few months ago. cfengine is nice except that the author doesn't believe that 'administrative information' is something that should be protected and thus has no plans to move f

Re: central administration techniques

2001-10-19 Thread Juha Jäykkä
> changes via cvs to a nfs mount, all the client machines download changes > via a cron job. Whoooa... nfs? Security++... I could consider using some secure networked file system, though but I doubt cron would be a good idea. Or maybe it is. Anyone any concerns? Another thing that crossed my m

Re: central administration techniques

2001-10-19 Thread Petro
On Fri, Oct 19, 2001 at 09:41:22AM -0700, nrvale0 wrote: > > maybe have a look at cfengine? > > or apt-cache search / freshmeat / google for other options > > I was down this road just a few months ago. cfengine is nice except > that the author doesn't believe that 'administrative information' is

Re: central administration techniques

2001-10-19 Thread Alson van der Meulen
On Fri, Oct 19, 2001 at 05:54:28PM +0300, Juha J?ykk? wrote: > I was wondering if there are any secure methods of centrally > managing the versions of certain files on Debian machines. I currently > have a woody, two sids and several potatos which need to be kept up to > date. The security patche

Re: central administration techniques

2001-10-19 Thread Alson van der Meulen
On Fri, Oct 19, 2001 at 06:33:43PM +0300, Juha J?ykk? wrote: > > > 3. Break into one of the other machines, use the suided script to > >^ > > I can't answer your questions - I know too little. Just one remark: > > AFAIK, Linux doesn't

Re: central administration techniques

2001-10-19 Thread Juha Jäykkä
> > 3. Break into one of the other machines, use the suided script to >^ > I can't answer your questions - I know too little. Just one remark: > AFAIK, Linux doesn't support suided shell scripts. At least it didn't do > that a few year

Re: central administration techniques

2001-10-19 Thread Tomasz Papszun
On Fri, 19 Oct 2001 at 17:54:28 +0300, Juha Jäykkä wrote: [...] > case, which is the safest option? Currently I am considering > configuring sudo to enable the admin user to execute a single script > (mods 0700) without a password or just chmod that script 4700. I am not

central administration techniques

2001-10-19 Thread Juha Jäykkä
I was wondering if there are any secure methods of centrally managing the versions of certain files on Debian machines. I currently have a woody, two sids and several potatos which need to be kept up to date. The security patches are not much of a concern since they are quite infrequent (except f

Re: central administration techniques

2001-10-19 Thread nrvale0
> maybe have a look at cfengine? > or apt-cache search / freshmeat / google for other options I was down this road just a few months ago. cfengine is nice except that the author doesn't believe that 'administrative information' is something that should be protected and thus has no plans to move

Re: central administration techniques

2001-10-19 Thread Juha Jäykkä
> changes via cvs to a nfs mount, all the client machines download changes > via a cron job. Whoooa... nfs? Security++... I could consider using some secure networked file system, though but I doubt cron would be a good idea. Or maybe it is. Anyone any concerns? Another thing that crossed my

Re: central administration techniques

2001-10-19 Thread Alson van der Meulen
On Fri, Oct 19, 2001 at 05:54:28PM +0300, Juha J?ykk? wrote: > I was wondering if there are any secure methods of centrally > managing the versions of certain files on Debian machines. I currently > have a woody, two sids and several potatos which need to be kept up to > date. The security patch

Re: central administration techniques

2001-10-19 Thread Alson van der Meulen
On Fri, Oct 19, 2001 at 06:33:43PM +0300, Juha J?ykk? wrote: > > > 3. Break into one of the other machines, use the suided script to > >^ > > I can't answer your questions - I know too little. Just one remark: > > AFAIK, Linux doesn't

Re: central administration techniques

2001-10-19 Thread Juha Jäykkä
> > 3. Break into one of the other machines, use the suided script to >^ > I can't answer your questions - I know too little. Just one remark: > AFAIK, Linux doesn't support suided shell scripts. At least it didn't do > that a few yea

Re: central administration techniques

2001-10-19 Thread Tomasz Papszun
On Fri, 19 Oct 2001 at 17:54:28 +0300, Juha Jäykkä wrote: [...] > case, which is the safest option? Currently I am considering > configuring sudo to enable the admin user to execute a single script > (mods 0700) without a password or just chmod that script 4700. I am not

central administration techniques

2001-10-19 Thread Juha Jäykkä
I was wondering if there are any secure methods of centrally managing the versions of certain files on Debian machines. I currently have a woody, two sids and several potatos which need to be kept up to date. The security patches are not much of a concern since they are quite infrequent (except