RE: Trusting a server's public key

2010-05-13 Thread Justin Lloyd
e- From: Сева Глущенко [mailto:seva.glusche...@gmail.com] Sent: Thursday, May 13, 2010 3:13 PM To: Justin Lloyd Cc: help-cfengine@cfengine.org Subject: Re: Trusting a server's public key Justin, it seems like your task can be performed as follows: files: "$(root_homedir)/.ss

RE: Trusting a server's public key

2010-05-13 Thread Justin Lloyd
3:13 PM To: Justin Lloyd Cc: help-cfengine@cfengine.org Subject: Re: Trusting a server's public key Justin, it seems like your task can be performed as follows: files: "$(root_homedir)/.ssh/lum.pub" copy_from => remote_copy_with_backup("/root/.ssh/id_rsa.pub&q

Re: Trusting a server's public key

2010-05-13 Thread Сева Глущенко
Justin, it seems like your task can be performed as follows: files: "$(root_homedir)/.ssh/lum.pub" copy_from => remote_copy_with_backup("/root/.ssh/id_rsa.pub", "lum"); "$(root_homedir)/.ssh/authorized_keys" edit_line => insert_file("$(root_homedir)/.ssh/lum.pub");

RE: Trusting a server's public key

2010-05-13 Thread Justin Lloyd
Someone raised a couple of good questions in a private email to me, so I thought I'd go ahead and send my response to the whole list. I didn't know if they'd want me to forward their response to the list, so I've omitted their response, just to be safe. :) My apologies if you prefer attribution,

Trusting a server's public key

2010-05-13 Thread Justin Lloyd
Hi all, I finally got an issue resolved regarding some of my systems not trusting a particular server's Cfengine public key, but I wanted to see if anyone has a better solution. Currently we maintain our master sudoers file on a server whose cf-serverd provides all systems with access to retrieve