Re: cfengine and hosts using DHCP

[John Sechrest]

 While you are looking at how cfengine works with DHCP....

 It might be a worth while effort to take the next step, and
 look at what it would look like for CFengine to get some of its
 data out of LDAP.

 If you have your authentication for your systems running
 out of ldap, it might be worth while to be able to 
 use LDAP as a configuration database too. 

 It provides security models and pre-existing tools to access
 the system.



Mark.Burgess@iu.hio.no writes:

 % 
 % This is a good poiny which I had not really considered up to this point.
 % here needs perhaps to be an option on cfservd which allows one to
 % specify a DHCP range. I shall look into this
 % 
 % M
 % 
 % On 27 Apr, Juha Ylitalo wrote:
 % > Current mode in cfservd <-> cfagent interaction seems to be based on
 % > idea that both parties have static IP and they have been introduced to
 % > each others at some point by administration.
 % > Are there any best practises on how to use cfengine in environments were
 % > you have mixed environment of static and DHCP addresses (i.e. Linux/*BSD
 % > workstations and laptops), where your cfservd or other central file
 % > repository can give all its configuration files
 % > (/var/cfengine/masterfiles/inputs/*), but clients should somehow be able
 % > to verify that downloaded files came from trusted source?
 % > I guess I could create script that would download PGP signed tarballs,
 % > verify signature and then untar them to /var/cfengine/inputs, but if
 % > there are better solutions, I would like to hear about them.
 % >  
 % 
 % 
 % 
 % ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 % Work: +47 22453272            Email:  Mark.Burgess@iu.hio.no
 % Fax : +47 22453205            WWW  :  http://www.iu.hio.no/~mark
 % ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 % 
 % 
 % 
 % _______________________________________________
 % Help-cfengine mailing list
 % Help-cfengine@gnu.org
 % http://mail.gnu.org/mailman/listinfo/help-cfengine

-----
John Sechrest          .         Helping people use
CTO PEAK -              .           computers and the Internet
Public Electronic         .            more effectively
Access to Knowledge,Inc       .                      
1600 SW Western, Suite 180       .            Internet: sechrest@peak.org
Corvallis Oregon 97333               .                  (541) 754-7325
                                            . http://www.peak.org/~sechrest