Re: [Puppet Users] Handling Sensitive Data

2012-05-08 Thread Ryan Coleman
On Tuesday, May 8, 2012 6:36:02 AM UTC-7, Erik Dalén wrote: > > > That still holds true (unless you want to micromanage access permissions). > > There is however a way to create a directory per host that is only > accessible by that host: > https://groups.google.com/forum/#!msg/puppet-users/XB

Re: [Puppet Users] Handling Sensitive Data

2012-05-08 Thread Erik Dalén
On 8 May 2012 14:28, Jistan Idiot wrote: > So we're looking at using Puppet.  There are three things we're trying > to figure out how to manage -- SSL keys for the webservers, SSH keys > for the users, and the user's passwords (and specific /etc/shadow and / > etc/passwd for each box). > > There's

[Puppet Users] Handling Sensitive Data

2012-05-08 Thread Jistan Idiot
So we're looking at using Puppet. There are three things we're trying to figure out how to manage -- SSL keys for the webservers, SSH keys for the users, and the user's passwords (and specific /etc/shadow and / etc/passwd for each box). There's a ton of concerns with each one of these. Is there