Re: [Puppet Users] SEC State and Dashboard

2011-04-23 Thread Ohad Levy
On Thu, Apr 21, 2011 at 10:21 PM, Glenn Buckholz < glenn.buckh...@steelthread.com> wrote: > I was wondering if anyone has, or is aware of puppet dashboard > integration with secstate (https://fedorahosted.org/secstate/) . > > A use case would be, I run a compliance report in secstate, it shows > u

[Puppet Users] Re: is there a definition of the abstract service type

2011-04-23 Thread Tim Coote
This all sounds to me like there isn't much of an abstraction, since there's no definition of what ought to happen (as opposed to what does happen). Surely, I want to be able to manage the xyz service in the same way no matter what the operating system. If I take Felix' suggestion and start hackin

Re: [Puppet Users] Distributed Puppet Architecture and Management

2011-04-23 Thread Brian Gallew
It depends on two things: your CA and the content of auth.conf. If you have one CA signing all your certificates, then every host can validate the cert on every master. If that's the case, then any host with the correct permissions in auth.conf can issue the puppet kick command. If you have diff