packages (newbie question)

2006-05-10 Thread JamieBohr
I am new to CF Engine and have been tasked by my manager to get a package installed on all our HP-UX systems. I have looked at the manuals (cfengine-Tutorial.pdf and cfengine-Reference.pdf) and can not seem to get something to work. I have a base configuration that seems to work but am having tro

Re: Collect public keys from all hosts?

2006-05-10 Thread Jamie Wilkinson
On Wed May 10, 2006 at 11:17:42 -0500, Brendan Strejcek wrote: >Chris St. Pierre wrote: > >> No, I'm not dealing with Cfengine keys. I'm dealing with host public >> keys, e.g., /etc/ssh/ssh_known_keys. I'd like to aggregate and >> distribute those keys without maintaining a list of hosts. > >This a

Re: Collect public keys from all hosts?

2006-05-10 Thread Jason Martin
On Wed, May 10, 2006 at 04:32:47PM -0500, Brendan Strejcek wrote: > > Possible alternatives would be for the cfagent script to contain some > > other method of distribution. A web server on the central server and > > having the cfagents do 'HTTP PUT' would likely work, for instance. scp > > with re

Re: Collect public keys from all hosts?

2006-05-10 Thread Brendan Strejcek
H?kan Olsson wrote: > Now, if only the copy keyword could copy *to* the server instead > of only from it then I wouldn't have had to use a common > NFS-(auto)mounted directory for the copy. There are serious security implications to this. At the very least, you would need to prevent a client from

Re: Collect public keys from all hosts?

2006-05-10 Thread HÃ¥kan Olsson
On Wed, 10 May 2006, Brendan Strejcek wrote: ... > I do something similar, though I do not use ssh-keyscan. I keep copies > of all my ssh key pairs on a central host. If a new machine with a > previously unused host name is built, its key pair needs to be copied to > the central location. If a new

Re: Collect public keys from all hosts?

2006-05-10 Thread Brendan Strejcek
Chris St. Pierre wrote: > No, I'm not dealing with Cfengine keys. I'm dealing with host public > keys, e.g., /etc/ssh/ssh_known_keys. I'd like to aggregate and > distribute those keys without maintaining a list of hosts. This a common example of a more general configuration management problem*: a

Re: How to choose policyhost based on class?

2006-05-10 Thread Brendan Strejcek
Jason Edgecombe wrote: > I'm not sure if the different domain names would cause a problem, > though. If it does cause a problem, you can set the domain variable in a similar way: !192_168:: domain = ( mydomain.com ) 192_168:: domain = ( int.mydomain.com ) You may also need that in

installation error

2006-05-10 Thread Josh Greenberg
I'm trying to install cfengine on a RHEL4 system. I've also tried it on RHEL3 with the same results. I run configure with no errors but when I run make, I get the following: filedir.c: In function `CheckExistingFile': filedir.c:672: error: structure has no member named `st_flags' filedir.c:676:

Re: How to choose policyhost based on class?

2006-05-10 Thread Jason Edgecombe
Jason Edgecombe wrote: Tracy R Reed wrote: I am using cfengine 2.1.16 on CentOS 4.3. I have machines on a local 192.168 network and machines with public ip's outside of our local network. I would like to be able to manage all of the policy from one place and keep all of the machines consistant

Re: How to choose policyhost based on class?

2006-05-10 Thread Jason Edgecombe
Tracy R Reed wrote: I am using cfengine 2.1.16 on CentOS 4.3. I have machines on a local 192.168 network and machines with public ip's outside of our local network. I would like to be able to manage all of the policy from one place and keep all of the machines consistant both inside and out. It