help-cfengine
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

$(domain) without DNS ?!


From: Yves
Subject: $(domain) without DNS ?!
Date: Fri, 4 Feb 2005 14:16:37 +0900

How to handle $(domain) variable in a clean, secure manner without DNS  ?

If $(domain) is not defined, copy action (remote) fails because of 
authentication mechanism .
So, we use the following workaround in cfservd.conf on $(policyhost):

SkipVerify = ( 10. )
domain      = ( dummy )
grant:
        /cfdepot/  *.dummy


# /var/cfengine/bin/cfservd -F -v

Listening for connections ...
cfservd: Allowing 10.10.10.102 to connect without (re)checking ID
Non-verified Host ID is ws01.dummy (Using skipverify)
Non-verified User ID seems to be root (Using skipverify)
cfservd: Unable to lookup hostname (ws01.dummy) or cfengine service: Hostname 
and service name not provided or found
Updating last-seen time for ws01.dummy
Loaded /var/cfengine/ppkeys/root-10.10.10.102.pub
A public key was already known from ws01.dummy/10.10.10.102 - no trust required
Adding IP 10.10.10.102 to SkipVerify - no need to check this if we have a key
The public key identity was confirmed as root@ws01.dummy
cfservd: Strong authentication of client ws01.dummy/10.10.10.102 achieved

env:
- v2.1.10
- using NIS
- installed on aix 4.3.3;5.1

Is there a way to handle it in a clean and secure manner?

Thanks,

Yves

 Y99@gmx.de am 04.02.2005 11:28:56 Uhr





reply via email to

[Prev in Thread] Current Thread [Next in Thread]