RE: Can't use host name regexps with trustkeysfrom

2010-03-04 Thread Assarsson, Emil
-Original Message- From: Mark Burgess [mailto:mark.burg...@iu.hio.no] Sent: torsdag den 4 mars 2010 12:25 To: Assarsson, Emil Cc: 'Neil Watson'; help-cfengine@cfengine.org Subject: Re: Can't use host name regexps with trustkeysfrom Emil, don't worry. We are thinking a

Re: Can't use host name regexps with trustkeysfrom

2010-03-04 Thread Mark Burgess
mars 2010 01:34 > To: help-cfengine@cfengine.org > Subject: Re: Can't use host name regexps with trustkeysfrom > > Shouldn't the administrator have the option to decide how trustworthy > the DNS service is? There are certainly no shortage of shoddy DNS > services out the

RE: Can't use host name regexps with trustkeysfrom

2010-03-04 Thread Assarsson, Emil
mars 2010 01:34 To: help-cfengine@cfengine.org Subject: Re: Can't use host name regexps with trustkeysfrom Shouldn't the administrator have the option to decide how trustworthy the DNS service is? There are certainly no shortage of shoddy DNS services out there but not all. Making the C

RE: Can't use host name regexps with trustkeysfrom

2010-03-04 Thread Assarsson, Emil
line. Best regards, Emil Assarsson emil.assars...@sonyericsson.com Phone: +46 (0)10 8017422 -Original Message- From: Mark Burgess [mailto:mark.burg...@iu.hio.no] Sent: onsdag den 3 mars 2010 22:28 To: Assarsson, Emil Cc: 'help-cfengine@cfengine.org' Subject: Re: Can't use h

Re: Can't use host name regexps with trustkeysfrom

2010-03-03 Thread Neil Watson
Shouldn't the administrator have the option to decide how trustworthy the DNS service is? There are certainly no shortage of shoddy DNS services out there but not all. Making the Cfengine do some checking such as PTR records might be compromise. -- Neil Watson Linux/UNIX Consultant http://watso

Re: Can't use host name regexps with trustkeysfrom

2010-03-03 Thread Mark Burgess
tisdag den 2 mars 2010 18:27 > To: 'Mark Burgess' > Cc: help-cfengine@cfengine.org > Subject: RE: Can't use host name regexps with trustkeysfrom > > Hi, > > This is my finding about using hostnames and dynamic IPs in cf3. I have > pounding the configuration wi

RE: Can't use host name regexps with trustkeysfrom

2010-03-03 Thread Assarsson, Emil
--- From: Mark Burgess [mailto:mark.burg...@iu.hio.no] Sent: måndag den 1 mars 2010 16:12 To: Assarsson, Emil Cc: help-cfengine@cfengine.org Subject: Re: Can't use host name regexps with trustkeysfrom Try running the server with -v to see the reason for the failure. Regex a

RE: Can't use host name regexps with trustkeysfrom

2010-03-02 Thread Assarsson, Emil
3 !!! System error for send: "Broken pipe" cf3 Challenge response from server asflx0007.domain.net/10.123.64.235 was incorrect! Best regards, Emil Assarsson emil.assars...@sonyericsson.com Phone: +46 (0)10 8017422 -Original Message- From: Mark Burgess [mailto:mark.burg...@

Re: Can't use host name regexps with trustkeysfrom

2010-03-01 Thread Mark Burgess
Try running the server with -v to see the reason for the failure. Regex are allowed in trustkeys Assarsson, Emil wrote: > Hi, > > It seems like I can't use hostnames with (for example) trustkeysfrom: > > body server control > { > trustkeysfrom => { '.*\.domain\.net' }; > dynamicaddress

Can't use host name regexps with trustkeysfrom

2010-03-01 Thread Assarsson, Emil
Hi, It seems like I can't use hostnames with (for example) trustkeysfrom: body server control { trustkeysfrom => { '.*\.domain\.net' }; dynamicaddresses => { '10\..*'}; allowconnects => { '10\..*' }; hostnamekeys => "true"; } I get a "!! Authentication dialogue with cfserver.dom