Re: Turn Off Use of Keys and Encryption

[Brendan Strejcek]

Jason Martin wrote:

> On Wed, Jan 04, 2006 at 12:11:46PM -0600, Pletan, Ray wrote:
>
> > We are implementing cfengine for post server build configuration. I
> > would like to turn OFF the use of keys and encryption to do this.
> > I have been unable to discover how to do this. I have set the
> > encrypt=false flag in my post build configuration files but cfengine
> > still seems to require the use of keys.
>
> The cfservd mechanism is linked to keys, you can't turn it off. The
> best you could do is have trustkeysfrom set to allow all hosts to be
> trusted, and periodically remove all the host keys from the servers
> ppkeys directory.

Not true. See:

http://www.cfengine.org/docs/cfengine-Reference.html#DynamicAddresses

This allows you to configure cfservd to replace keys when necessary.

Best,
Brendan

--
Senior System Administrator
The University of Chicago
Department of Computer Science

http://www.cs.uchicago.edu/people/brendan
http://praksys.blogspot.com/