[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Turn Off Use of Keys and Encryption
From: |
Brendan Strejcek |
Subject: |
Re: Turn Off Use of Keys and Encryption |
Date: |
Wed, 4 Jan 2006 14:39:44 -0600 |
User-agent: |
Mutt/1.5.6+20040818i |
Jason Martin wrote:
> On Wed, Jan 04, 2006 at 12:11:46PM -0600, Pletan, Ray wrote:
>
> > We are implementing cfengine for post server build configuration. I
> > would like to turn OFF the use of keys and encryption to do this.
> > I have been unable to discover how to do this. I have set the
> > encrypt=false flag in my post build configuration files but cfengine
> > still seems to require the use of keys.
>
> The cfservd mechanism is linked to keys, you can't turn it off. The
> best you could do is have trustkeysfrom set to allow all hosts to be
> trusted, and periodically remove all the host keys from the servers
> ppkeys directory.
Not true. See:
http://www.cfengine.org/docs/cfengine-Reference.html#DynamicAddresses
This allows you to configure cfservd to replace keys when necessary.
Best,
Brendan
--
Senior System Administrator
The University of Chicago
Department of Computer Science
http://www.cs.uchicago.edu/people/brendan
http://praksys.blogspot.com/