Forum: Cfengine Help
Subject: Re: path based access rules on server
Author: joke
Link to topic: https://cfengine.com/forum/read.php?3,18833,18845#msg-18845
Of cause reloading would be a performance penalty. That's why I would prefer
regex pattern matching or something like $(sys.client_host) with
Forum: Cfengine Help
Subject: Re: path based access rules on server
Author: mark
Link to topic: https://cfengine.com/forum/read.php?3,18833,18844#msg-18844
If you were expecting it to reload every time, you might not have been
expecting the performance hit that would entail.
You could get cf-agen
Forum: Cfengine Help
Subject: Re: path based access rules on server
Author: joke
Link to topic: https://cfengine.com/forum/read.php?3,18833,18843#msg-18843
I just tried to use execresult but it doesn't work as expected.
cf-serverd needs to be restarted in order to regenerate the permissions lists
Forum: Cfengine Help
Subject: Re: path based access rules on server
Author: joke
Link to topic: https://cfengine.com/forum/read.php?3,18833,18842#msg-18842
Filled bug report
___
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/
Forum: Cfengine Help
Subject: Re: path based access rules on server
Author: mark
Link to topic: https://cfengine.com/forum/read.php?3,18833,18840#msg-18840
I shall certainly give it some thought for the future. Why not submit a feature
request in our bug tracker?
Forum: Cfengine Help
Subject: Re: path based access rules on server
Author: joke
Link to topic: https://cfengine.com/forum/read.php?3,18833,18839#msg-18839
Using execresult would be an alternative.
I just tough about using path names with regular expressions and using the
match-function to limit
Forum: Cfengine Help
Subject: Re: path based access rules on server
Author: Seva Gluschenko
Link to topic: https://cfengine.com/forum/read.php?3,18833,18838#msg-18838
Mark,
certainly, having a $(sys.client_host), or $(sys.client_ip) in cf-serverd would
have solved such issues in more automated w
Forum: Cfengine Help
Subject: Re: path based access rules on server
Author: mark
Link to topic: https://cfengine.com/forum/read.php?3,18833,18837#msg-18837
There are no real short cuts if you want specific detailed access control. You
have to specify it somehow.
You could generate the list from /
Forum: Cfengine Help
Subject: Re: path based access rules on server
Author: joke
Link to topic: https://cfengine.com/forum/read.php?3,18833,18836#msg-18836
I would prefer not to use an explicit list such as
"client" slist => { "client-one","client-two", ... };
because that list needs to be maint
Forum: Cfengine Help
Subject: Re: path based access rules on server
Author: mark
Link to topic: https://cfengine.com/forum/read.php?3,18833,18835#msg-18835
Why not use a list pattern for all your cases:
vars:
"client" slist => { "client-one","client-two", ... };
access:
"/some_path/
10 matches
Mail list logo
