CFEngine Help: user management

2012-06-13 Thread no-reply
Forum: CFEngine Help Subject: user management Author: bernhard.gl...@ecologic.eu Link to topic: https://cfengine.com/forum/read.php?3,26190,26190#msg-26190 Hi all, I browsed through a lot of the cfengine ressources and also just read the very excellent book by Diego Zamboni but still wondering

arrays with lists

2012-06-13 Thread Neil Watson
I can't recall if this is now possible with 3.3.0. Can we define a list in an array and then loop the list after passing it? E.g. body common control { bundlesequence => { "main", }; inputs => { "cfengine_stdlib.cf", }; } bundle agent main { vars: "l

On-site training available in Ohio or in New York the last week of September

2012-06-13 Thread Aleksey Tsalolikhin
Hi, If anybody on the East Coast of the US needs an on-site class on CFEngine 3, I will be in Columbus Ohio on 28 - 30 September for Ohio Linux Fest, and I could deliver my popular 4 day intro course on 24 - 27 Sep in Columbus or NYC or nearby. The course description is at http://www.vertical

CFEngine Help: Re: cfengine3.3.3 binaries no longer install in /usr/local/sbin

2012-06-13 Thread no-reply
Forum: CFEngine Help Subject: Re: cfengine3.3.3 binaries no longer install in /usr/local/sbin Author: Jason Christy Link to topic: https://cfengine.com/forum/read.php?3,26176,26193#msg-26193 If this was intentional, the following example in the rpm will need to be updated: /var/cfengine/share/doc

CFEngine Help: Re: separate dev/production environments

2012-06-13 Thread no-reply
Forum: CFEngine Help Subject: Re: separate dev/production environments Author: Tim Link to topic: https://cfengine.com/forum/read.php?3,26169,26194#msg-26194 Thank you, Tom. I checked out your post. It is a clever solution, and very helpful. Our current Cfengine2 solution implements the same ap

distributing secrets

2012-06-13 Thread Neil Watson
Suppose you wish to install a piece of software on every host. Part of the software has password that is unique to each host. I do not want all passwords stored in the Cfengine policy. How do you go about distributing those secrets? I thought about having a secrets file and using CF access promi

Re: distributing secrets

2012-06-13 Thread Diego Zamboni
Neil, With CF3 Enterprise, you could use remotescalar() or hubknowledge(), which allow you to fetch values from remote CFEngine hosts, then you could have the values stored only on the hub. https://cfengine.com/manuals/cf3-Reference#Function-hubknowledge https://cfengine.com/manuals/cf3-Referen

Re: distributing secrets

2012-06-13 Thread Brian Bennett
Where else is this password referenced? My inclination would be a promise that generates the password directly on the box (perhaps with pwgen). Something like this: files: "/etc/local/pass" create => "false", classes => if_notok("gen_pass"); commands: gen_pass:: "/usr/bin/pwgen -s >

CFEngine Help: Re: cfengine3.3.3 binaries no longer install in /usr/local/sbin

2012-06-13 Thread no-reply
Forum: CFEngine Help Subject: Re: cfengine3.3.3 binaries no longer install in /usr/local/sbin Author: timw077 Link to topic: https://cfengine.com/forum/read.php?3,26176,26199#msg-26199 This is a bug. It is not in the change log, and the examples still point the old way. If I could find the bug

Re: CFEngine Help: Re: cfengine3.3.3 binaries no longer install in /usr/local/sbin

2012-06-13 Thread Nick Anderson
no-re...@cfengine.com wrote: >Forum: CFEngine Help >Subject: Re: cfengine3.3.3 binaries no longer install in >/usr/local/sbin >Author: timw077 >Link to topic: >https://cfengine.com/forum/read.php?3,26176,26199#msg-26199 > >This is a bug. It is not in the change log, and the examples still >point

Re: distributing secrets

2012-06-13 Thread Neil Watson
To answer your questions. The software in question is Bacula. A password is stored in the client's and server (director's) configuration. Each client should have its own password that the directory must also know. The password is normal ASCII inside a typical configuration file. In this case I

Re: distributing secrets

2012-06-13 Thread Neil Watson
This is interesting. Server bundles do allow list iteration. Consider this: body common control { bundlesequence => { "main", }; } bundle agent main { reports: cfengine:: "Main agent bundle"; } body server control { port => "