L, have you read "Securely deploying CFEngine on untrusted networks"?
http://cfengine.com/company/blog-detail/securely-deploying-cfengine-on-untrusted-networks/

Best,
-at


On Mon, Aug 17, 2015 at 5:02 PM, Lawrence K. Chen, P.Eng. <[email protected]>
wrote:

> I was thinking that too.... I had already defined stuff to decide whether
> connecting to policy_server is possible...wonder if I expose any classes on
> outcome (its the only place that I'm using namespace, because the core is
> shared between my update policy and failsafe...and it was partly to prevent
> me from write promises that won't work in failsafe.)
>
> On my home network, I (used) run dropbox on one server and share it using
> nfs or samba to my other ocmputers.  I think a holdover from the time
> before LAN sync, though since there's no native FreeBSD client, its how
> those systems access my Dropbox.  But, my laptop ran its own
> instance...since I wanted it for when I travel.  Though that was before I
> had upgraded Dropbox.
>
> I have it on two servers at home now....with different default gateways...
>
> Might have to plan on finding a new laptop with more than enough space
> when syncing with Dropbox now....or more if there's a sync client for
> Google Drive.  Are there dropbox like client for Google Drive (and now like
> some open source one I had tried...had about 50MB to sync...which it did
> over and over and over again...until a few days into my service month I'm
> alerted that I've used 80% of my cap.
>
> Yeah, I haven't tried that client since (though now that it requires
> openssl 1.0.1, can't build it at the moment.)
>
> Not sure when I'll find the perfect next laptop with more than 2TB of SSD
> storage...for next to nothing :)
>
> L
>
> OTOH, I do have my cfengine server exposed, though its only open to
> specific IPs, so that my work computer can be managed.  Worked pretty good
> recently, when my main computer died and got remote access services
> deployed on older computer.  So I can at least continue to make progress at
> work.
>
> Not sure what I would do if I wanted to connect from hotel wifi or such.
> Wonder if there's a way to have CFE knock for server access?
>
> On 2015-08-17 12:37, Aleksey Tsalolikhin wrote:
>
> I would use CFEngine to mount the SMB shares if you're at work (on a
> 10.x.x.x network).
>
> On Sat, Aug 15, 2015 at 5:51 PM, Ski Kacoroski <[email protected]>
> wrote:
>
>> Hi,
>>
>> I use autofs to connect to several smb shares at work.  This works fine
>> except for when i am not at work, then things get long delays if I try df
>> -h for example as it attempts to connect to each share in the map and times
>> out.  Any ideas on how to set this up so it only will try to connect to
>> shares at work while I am at work (e.g. on a 10.x.x.x network?  Or perhaps
>> there is a timeout parameter I can tweak a bit or maybe a better tool than
>> autofs.
>>
>> cheers,
>>
>> ski
>> h
>> --
>> "When we try to pick out anything by itself, we find it
>>   connected to the entire universe"            John Muir
>>
>> Chris "Ski" Kacoroski, [email protected], 206-501-9803
>> or ski98033 on most IM services
>> _______________________________________________
>> Discuss mailing list
>> [email protected]
>> https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss
>> This list provided by the League of Professional System Administrators
>> http://lopsa.org/
>>
>
>
>
> --
> Need CFEngine training?  Email [email protected]
>
> _______________________________________________
> Discuss mailing list
> [email protected]
> https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss
> This list provided by the League of Professional System Administrators
>  http://lopsa.org/
>
> --
> Who: Lawrence K. Chen, P.Eng. - W0LKC - Sr. Unix Systems Administrator
>                                    with LOPSA Professional Recognition.
> For: Enterprise Server Technologies (EST) -- & SafeZone Ally
>



-- 
Need CFEngine training?  Email [email protected]
_______________________________________________
Discuss mailing list
[email protected]
https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss
This list provided by the League of Professional System Administrators
 http://lopsa.org/

Reply via email to