Forum: Cfengine Help
Subject: Re: Trustkeys not being shared
Author: mwlarsen
Link to topic: https://cfengine.com/forum/read.php?3,17676,17741#msg-17741
neilhwatson Wrote:
---
> The IP's in your posts are conflicting. I see
> 10.2.0.219, 10.2.0.
Forum: Cfengine Help
Subject: Re: Trustkeys not being shared
Author: neilhwatson
Link to topic: https://cfengine.com/forum/read.php?3,17676,17739#msg-17739
The IP's in your posts are conflicting. I see 10.2.0.219, 10.2.0.220, "cf3
Connect to 10.128.205.118 = 10.128.205.118 on port 5308" and "all
Forum: Cfengine Help
Subject: Re: Trustkeys not being shared
Author: mwlarsen
Link to topic: https://cfengine.com/forum/read.php?3,17676,17738#msg-17738
neilhwatson Wrote:
---
> Please explain your topology.
It's a couple of RHEL 5.3 VMs (VMware
Forum: Cfengine Help
Subject: Re: Trustkeys not being shared
Author: mwlarsen
Link to topic: https://cfengine.com/forum/read.php?3,17676,17737#msg-17737
pieterb Wrote:
---
> Any firewalling? Try telnet 10.2.1.219 5308 to see
> if your machines ar
Forum: Cfengine Help
Subject: Re: Trustkeys not being shared
Author: neilhwatson
Link to topic: https://cfengine.com/forum/read.php?3,17676,17736#msg-17736
Please explain your topology.
___
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://c
Forum: Cfengine Help
Subject: Re: Trustkeys not being shared
Author: pieterb
Link to topic: https://cfengine.com/forum/read.php?3,17676,17734#msg-17734
Any firewalling? Try telnet 10.2.1.219 5308 to see if your machines are
actually connectable.
___
He
Forum: Cfengine Help
Subject: Re: Trustkeys not being shared
Author: mwlarsen
Link to topic: https://cfengine.com/forum/read.php?3,17676,17729#msg-17729
Yeah, I've read that at least four dozen times. I have the following in the
server's promises.cf:
body server control
{
allowconnects
Forum: Cfengine Help
Subject: Re: Trustkeys not being shared
Author: neilhwatson
Link to topic: https://cfengine.com/forum/read.php?3,17676,17727#msg-17727
http://www.cfengine.org/manuals/cf3-reference.html#Key-exchange
___
Help-cfengine mailing list
He
Forum: Cfengine Help
Subject: Re: Trustkeys not being shared
Author: mwlarsen
Link to topic: https://cfengine.com/forum/read.php?3,17676,17724#msg-17724
neilhwatson Wrote:
---
> Key exchange is not meant to be to easy otherwise
> the security mod
Forum: Cfengine Help
Subject: Re: Trustkeys not being shared
Author: neilhwatson
Link to topic: https://cfengine.com/forum/read.php?3,17676,17723#msg-17723
Key exchange is not meant to be to easy otherwise the security model is in
jeopardy. When do I give the client the server's key? The same t
Forum: Cfengine Help
Subject: Re: Trustkeys not being shared
Author: mwlarsen
Link to topic: https://cfengine.com/forum/read.php?3,17676,17722#msg-17722
neilhwatson Wrote:
---
> Typically the server's public key is copied to the
> client manually
Forum: Cfengine Help
Subject: Re: Trustkeys not being shared
Author: neilhwatson
Link to topic: https://cfengine.com/forum/read.php?3,17676,17682#msg-17682
I have Cfengine distribute my public keys ;)
___
Help-cfengine mailing list
Help-cfengine@cfengin
Forum: Cfengine Help
Subject: Re: Trustkeys not being shared
Author: mark
Link to topic: https://cfengine.com/forum/read.php?3,17676,17681#msg-17681
I bet you do this every single day with ssh, without thinking about it
___
Help-cfengine mailing list
H
Forum: Cfengine Help
Subject: Re: Trustkeys not being shared
Author: neilhwatson
Link to topic: https://cfengine.com/forum/read.php?3,17676,17680#msg-17680
I think you can authorize the client to trust a key from server but I feel that
is too open for my taste.
__
Forum: Cfengine Help
Subject: Re: Trustkeys not being shared
Author: elleeseb
Link to topic: https://cfengine.com/forum/read.php?3,17676,17678#msg-17678
I did (since I knew what the problem was) but I thought there might be some
other way that is automated. I do have it working when I copy it ma
Forum: Cfengine Help
Subject: Re: Trustkeys not being shared
Author: neilhwatson
Link to topic: https://cfengine.com/forum/read.php?3,17676,17677#msg-17677
Typically the server's public key is copied to the client manually when you
install Cfengine. Have you done this?
_
16 matches
Mail list logo