Cfengine Help: Re: Question about keys and trust

2010-04-01 Thread forum
Forum: Cfengine Help Subject: Re: Question about keys and trust Author: mlebel Link to topic: https://cfengine.com/forum/read.php?3,16739,16762#msg-16762 Neil, I thought of your suggestion but if my understanding of key exchange is correct I would still end up with mistrust since on the first ke

Cfengine Help: Re: Question about keys and trust

2010-04-01 Thread forum
Forum: Cfengine Help Subject: Re: Question about keys and trust Author: neilhwatson Link to topic: https://cfengine.com/forum/read.php?3,16739,16761#msg-16761 Now I think I see. It sounds to me as though you have a cfservd process running on each cluster node. You want a client to pull from th

Cfengine Help: Re: Question about keys and trust

2010-04-01 Thread forum
Forum: Cfengine Help Subject: Re: Question about keys and trust Author: mlebel Link to topic: https://cfengine.com/forum/read.php?3,16739,16759#msg-16759 Neil, Clearly I am not getting my message out, sorry for that. So here a simpler attempt: I have a management host that needs to pull files

Cfengine Help: Re: Question about keys and trust

2010-04-01 Thread forum
Forum: Cfengine Help Subject: Re: Question about keys and trust Author: neilhwatson Link to topic: https://cfengine.com/forum/read.php?3,16739,16757#msg-16757 I'm afraid your explanation is too vague for me to fully understand. Are you saying that you want the agent on host A to copy files from

Cfengine Help: Re: Question about keys and trust

2010-04-01 Thread forum
Forum: Cfengine Help Subject: Re: Question about keys and trust Author: mlebel Link to topic: https://cfengine.com/forum/read.php?3,16739,16756#msg-16756 Neil, Ok so lets step back: What I need is for a host to copy specific files from a host that is running a known application accessible by a

Cfengine Help: Re: Question about keys and trust

2010-04-01 Thread forum
Forum: Cfengine Help Subject: Re: Question about keys and trust Author: neilhwatson Link to topic: https://cfengine.com/forum/read.php?3,16739,16755#msg-16755 I do not recommend your proposal. It will break trust. Try: https://cfengine.org/pipermail/help-cfengine/2006-May/000224.html Again, I'm

Cfengine Help: Re: Question about keys and trust

2010-04-01 Thread forum
Forum: Cfengine Help Subject: Re: Question about keys and trust Author: mlebel Link to topic: https://cfengine.com/forum/read.php?3,16739,16754#msg-16754 Neil, I just tried searching for nat and nothing came out. Can you provided me with your proposition? Mine is as follow:(untested and I am n

Cfengine Help: Re: Question about keys and trust

2010-04-01 Thread forum
Forum: Cfengine Help Subject: Re: Question about keys and trust Author: neilhwatson Link to topic: https://cfengine.com/forum/read.php?3,16739,16753#msg-16753 There might be ways to do what you desire. I worry that this will break the trust mechanism. Further I suspect there is another way but,

RE: Cfengine Help: Re: Question about keys and trust

2010-04-01 Thread Lebel, Marco
@cfengine.org Subject: Cfengine Help: Re: Question about keys and trust Forum: Cfengine Help Subject: Re: Question about keys and trust Author: neilhwatson Link to topic: https://cfengine.com/forum/read.php?3,16739,16749#msg-16749 Are you referring to a virtual IP address, common in clusters? I don&#

Cfengine Help: Re: Question about keys and trust

2010-04-01 Thread forum
Forum: Cfengine Help Subject: Re: Question about keys and trust Author: neilhwatson Link to topic: https://cfengine.com/forum/read.php?3,16739,16749#msg-16749 Are you referring to a virtual IP address, common in clusters? I don't know why you would use the VIP for Cf versus the node's unique IP.