Re: Tiered admins with cfengine

[Luke Kanies]

On Thu, 13 Oct 2005, Jason Edgecombe wrote:

> Both your comments and Mark's are very helpful. Importing of files was
> one way I thought of. I think the more complex problem is how to define
> the groups college1, college2, ...

I find a central repository like LDAP to be the best place to store
information like this.  It's easy for hosts to export or look up the
information (I have written lots of scripts that look things up in LDAP
and are run by cfengine), and it's tons easier to audit exactly what
is happening where.

I find the method of using arbitrary (i.e., not intrinsic to the system)
local flags for config determination to be just about unmaintainable,
because you can't query against it.

-- 
You can't have everything.  Where would you put it?
                -- Stephen Wright
---------------------------------------------------------------------
Luke Kanies | http://reductivelabs.com | http://config-mgmt.blogspot.com