Re: [Puppet Users] puppet facter for password hashing algorithm on a per OS basis

2016-02-12 Thread warron.french
John, thank you. I don't know how to write that kind of code yet; but at least now I have something to research. On Feb 10, 2016 9:33 PM, "John Warburton" wrote: > Ah manual changes... > > Ok you need some way to identify which hosts use which hash type and > classify them as such. > > We have a

Re: [Puppet Users] puppet facter for password hashing algorithm on a per OS basis

2016-02-11 Thread Garrett Honeycutt
On 2/10/16 9:33 PM, John Warburton wrote: > Ah manual changes... > > Ok you need some way to identify which hosts use which hash type and > classify them as such. > > We have an external node classifier, and we would set a parameter for > the host to say hash_type => 'bsdmd5' for example. You co

Re: [Puppet Users] puppet facter for password hashing algorithm on a per OS basis

2016-02-10 Thread John Warburton
Ah manual changes... Ok you need some way to identify which hosts use which hash type and classify them as such. We have an external node classifier, and we would set a parameter for the host to say hash_type => 'bsdmd5' for example. You could default if osfamily is Redhat to not even look for th

Re: [Puppet Users] puppet facter for password hashing algorithm on a per OS basis

2016-02-10 Thread warron.french
John/Garret, thanks but the hash-type isn't specific to os&release, it is manually defined/altered by the sysadmin. Does that help any? To be more detailed, I might have something like the following: CentOS-6.X. 12 nodes all hash=sha-512, Solaris 10u6 13 nodes all hash=bsdmd5, but... Solaris 10u

Re: [Puppet Users] puppet facter for password hashing algorithm on a per OS basis

2016-02-10 Thread John Warburton
Warron Use the operatingsystemrelease fact and decide the hash to use based on that. It will spit out something like 10_u9 by reading /etc/release. This isn't too bad, but if you patch a server built as u9 with a current patch set, the actual OS will be u11 no matter what /etc/release says, so be

Re: [Puppet Users] puppet facter for password hashing algorithm on a per OS basis

2016-02-10 Thread Garrett Honeycutt
On 2/10/16 8:38 AM, Warron French wrote: > Hello, I was hoping someone could help with answering this question, for > the following scenario. > > On our network we have some OLD ( I mean 1/06, up to 1/09) Solaris 10 > SPARC servers and workstations along with newer Solaris 10 SPARC servers > (runn

[Puppet Users] puppet facter for password hashing algorithm on a per OS basis

2016-02-10 Thread Warron French
Hello, I was hoping someone could help with answering this question, for the following scenario. On our network we have some OLD ( I mean 1/06, up to 1/09) Solaris 10 SPARC servers and workstations along with newer Solaris 10 SPARC servers (running even the lastest revisions, like 1/13); and we