Jason Martin wrote: > On Wed, Jan 04, 2006 at 12:11:46PM -0600, Pletan, Ray wrote: > > > We are implementing cfengine for post server build configuration. I > > would like to turn OFF the use of keys and encryption to do this. > > I have been unable to discover how to do this. I have set the > > encrypt=false flag in my post build configuration files but cfengine > > still seems to require the use of keys. > > The cfservd mechanism is linked to keys, you can't turn it off. The > best you could do is have trustkeysfrom set to allow all hosts to be > trusted, and periodically remove all the host keys from the servers > ppkeys directory.
Not true. See: http://www.cfengine.org/docs/cfengine-Reference.html#DynamicAddresses This allows you to configure cfservd to replace keys when necessary. Best, Brendan -- Senior System Administrator The University of Chicago Department of Computer Science http://www.cs.uchicago.edu/people/brendan http://praksys.blogspot.com/ _______________________________________________ Help-cfengine mailing list Help-cfengine@gnu.org http://lists.gnu.org/mailman/listinfo/help-cfengine
