Forum: CFEngine Help
Subject: Should Clients & Servers share a promises.cf file?
Author: ryanwilliams
Link to topic: https://cfengine.com/forum/read.php?3,23025,23025#msg-23025
Hi,
I'm new to CF3 and i've created my config very similar to the working
example in section 4 of the Reference Manual.
I've got CF3 setup in a Client/Server scenario and its working well managing
the following.
Linux users with passwords
MOTD
SSH Keys
SSH Server
VMWare-Tools (on VM's only)
Yum Packages
My complete configuration is available at http://pastebin.com/DAfNNTaL (All
feedback welcome).
As per my understanding of the best practice i've created a masterfiles
directory on my CF3 server which contains a cfengine/inputs directory aswell as
other master files and this is stored under versioning control (svn).
CF3 is installed on several clients and quite happily downloading the latest
copy of the .cf files from the server.
I'm using a firewall on my CF3 server to prevent unauthorized access at this
time.
I'm using the same set of .cf files on both the server and the clients.
1) Is this best practice or should i somehow seperate out the servers config
and not deploy it to the clients?
2) If this is the best practice, am i permitted to introduce classes:: to the
"body server control" section?
3) is the following class the best way to determine if the local computer is my
policy server?
classes:
"cfserver" expression => strcmp("$(sys.fqhost)","cf0.xxx.xx");
Thank you for taking the time to read all of this.
Warm Regards
Ryan Williams
_______________________________________________
Help-cfengine mailing list
[email protected]
https://cfengine.org/mailman/listinfo/help-cfengine
