Re: [CentOS] Configuration Compliance auditing for many CentOS 5.x boxes

2012-02-06 Thread Eero Volotinen
2012/2/2 Ross Walker : > On Feb 1, 2012, at 2:54 PM, Tom H wrote: > >> Hi CentOS experts,* >> >> Short Version* >> >> I would like to produce a weekly report in HTML for each CentOS 5.x >> server we have indicating configuration compliance with some industry >> benchmark. I am looking for a tool o

Re: [CentOS] Configuration Compliance auditing for many CentOS 5.x boxes

2012-02-06 Thread Denniston, Todd A CIV NAVSURFWARCENDIV Crane
> -Original Message- > From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On > Behalf Of Tom H > Sent: Wednesday, February 01, 2012 14:54 > To: CentOS mailing list > Subject: [CentOS] Configuration Compliance auditing for many CentOS 5.x > boxes &

Re: [CentOS] Configuration Compliance auditing for many CentOS 5.x boxes

2012-02-01 Thread Les Mikesell
On Wed, Feb 1, 2012 at 6:43 PM, Tom H wrote: > On 02/02/12 00:26, Les Mikesell wrote: >> >> >> Is anyone looking at salt instead of puppet yet?  http://saltstack.org/ >> > > I had such a bad experience with puppet, that I ran like a jilted teenage > lover on a rebound into the arms of chef... > >

Re: [CentOS] Configuration Compliance auditing for many CentOS 5.x boxes

2012-02-01 Thread Tom H
On 02/02/12 00:26, Les Mikesell wrote: > > Is anyone looking at salt instead of puppet yet? http://saltstack.org/ > I had such a bad experience with puppet, that I ran like a jilted teenage lover on a rebound into the arms of chef... unfortunately I may not have reviewed all the options (includ

Re: [CentOS] Configuration Compliance auditing for many CentOS 5.x boxes

2012-02-01 Thread Tom H
On 02/02/12 00:04, Kwan Lowe wrote: > > Next was auditing, which I think may apply to your question. > > For the configurations, we are experimenting with cfengine and puppet. They > allow you to track configuration changes, reset changes, etc.. I've also > used CVS to track configuration files di

Re: [CentOS] Configuration Compliance auditing for many CentOS 5.x boxes

2012-02-01 Thread Les Mikesell
On Wed, Feb 1, 2012 at 6:04 PM, Kwan Lowe wrote: > > For the basic package setup, Spacewalk or Satellite can track the versions > and allow you to lock the package set. There are also existing scripts that > wrap variations of an 'rpm -qVa' and send the reports back. Ocsinventory-ng will send a h

Re: [CentOS] Configuration Compliance auditing for many CentOS 5.x boxes

2012-02-01 Thread Kwan Lowe
On Wed, Feb 1, 2012 at 2:54 PM, Tom H wrote: > Hi CentOS experts,* > > Short Version* > > I would like to produce a weekly report in HTML for each CentOS 5.x > server we have indicating configuration compliance with some industry > benchmark. I am looking for a tool or tools to implement this, I

Re: [CentOS] Configuration Compliance auditing for many CentOS 5.x boxes

2012-02-01 Thread Ross Walker
On Feb 1, 2012, at 2:54 PM, Tom H wrote: > Hi CentOS experts,* > > Short Version* > > I would like to produce a weekly report in HTML for each CentOS 5.x > server we have indicating configuration compliance with some industry > benchmark. I am looking for a tool or tools to implement this, I

[CentOS] Configuration Compliance auditing for many CentOS 5.x boxes

2012-02-01 Thread Tom H
Hi CentOS experts,* Short Version* I would like to produce a weekly report in HTML for each CentOS 5.x server we have indicating configuration compliance with some industry benchmark. I am looking for a tool or tools to implement this, I am happy to use 3rd party proprietary stuff if necessary