Re: central administration techniques

2001-12-17 Thread Tollef Fog Heen
* nrvale0 | maybe have a look at cfengine? | or apt-cache search / freshmeat / google for other options | | I was down this road just a few months ago. cfengine is nice except | that the author doesn't believe that 'administrative information' is | something that should be protected and thus

Re: central administration techniques

2001-12-17 Thread Tollef Fog Heen
* nrvale0 | maybe have a look at cfengine? | or apt-cache search / freshmeat / google for other options | | I was down this road just a few months ago. cfengine is nice except | that the author doesn't believe that 'administrative information' is | something that should be protected and thus

Re: central administration techniques

2001-10-22 Thread Peter Cordes
On Fri, Oct 19, 2001 at 05:54:28PM +0300, Juha J?ykk? wrote: I was wondering if there are any secure methods of centrally managing the versions of certain files on Debian machines. The problem you describe (in the part of your email that I deleted) seems to be not wanting to give access to

Re: central administration techniques

2001-10-22 Thread Peter Cordes
On Fri, Oct 19, 2001 at 05:54:28PM +0300, Juha J?ykk? wrote: I was wondering if there are any secure methods of centrally managing the versions of certain files on Debian machines. The problem you describe (in the part of your email that I deleted) seems to be not wanting to give access to

central administration techniques

2001-10-19 Thread Juha Jäykkä
I was wondering if there are any secure methods of centrally managing the versions of certain files on Debian machines. I currently have a woody, two sids and several potatos which need to be kept up to date. The security patches are not much of a concern since they are quite infrequent (except

Re: central administration techniques

2001-10-19 Thread Tomasz Papszun
On Fri, 19 Oct 2001 at 17:54:28 +0300, Juha Jykk wrote: [...] case, which is the safest option? Currently I am considering configuring sudo to enable the admin user to execute a single script (mods 0700) without a password or just chmod that script 4700. I am not

Re: central administration techniques

2001-10-19 Thread Juha Jäykkä
3. Break into one of the other machines, use the suided script to ^ I can't answer your questions - I know too little. Just one remark: AFAIK, Linux doesn't support suided shell scripts. At least it didn't do that a few years

Re: central administration techniques

2001-10-19 Thread Alson van der Meulen
On Fri, Oct 19, 2001 at 06:33:43PM +0300, Juha J?ykk? wrote: 3. Break into one of the other machines, use the suided script to ^ I can't answer your questions - I know too little. Just one remark: AFAIK, Linux doesn't support

Re: central administration techniques

2001-10-19 Thread Alson van der Meulen
On Fri, Oct 19, 2001 at 05:54:28PM +0300, Juha J?ykk? wrote: I was wondering if there are any secure methods of centrally managing the versions of certain files on Debian machines. I currently have a woody, two sids and several potatos which need to be kept up to date. The security patches

Re: central administration techniques

2001-10-19 Thread Juha Jäykkä
changes via cvs to a nfs mount, all the client machines download changes via a cron job. Whoooa... nfs? Security++... I could consider using some secure networked file system, though but I doubt cron would be a good idea. Or maybe it is. Anyone any concerns? Another thing that crossed my

Re: central administration techniques

2001-10-19 Thread nrvale0
maybe have a look at cfengine? or apt-cache search / freshmeat / google for other options I was down this road just a few months ago. cfengine is nice except that the author doesn't believe that 'administrative information' is something that should be protected and thus has no plans to move

Re: central administration techniques

2001-10-19 Thread Petro
On Fri, Oct 19, 2001 at 09:41:22AM -0700, nrvale0 wrote: maybe have a look at cfengine? or apt-cache search / freshmeat / google for other options I was down this road just a few months ago. cfengine is nice except that the author doesn't believe that 'administrative information' is

Re: central administration techniques

2001-10-19 Thread Vineet Kumar
* Juha J?ykk? ([EMAIL PROTECTED]) [011019 07:57]: I was wondering if there are any secure methods of centrally managing the versions of certain files on Debian machines. I currently have a woody, two sids and several potatos which need to be kept up to date. The security patches are not

central administration techniques

2001-10-19 Thread Juha Jäykkä
I was wondering if there are any secure methods of centrally managing the versions of certain files on Debian machines. I currently have a woody, two sids and several potatos which need to be kept up to date. The security patches are not much of a concern since they are quite infrequent (except

Re: central administration techniques

2001-10-19 Thread Tomasz Papszun
On Fri, 19 Oct 2001 at 17:54:28 +0300, Juha Jäykkä wrote: [...] case, which is the safest option? Currently I am considering configuring sudo to enable the admin user to execute a single script (mods 0700) without a password or just chmod that script 4700. I am not

Re: central administration techniques

2001-10-19 Thread Juha Jäykkä
3. Break into one of the other machines, use the suided script to ^ I can't answer your questions - I know too little. Just one remark: AFAIK, Linux doesn't support suided shell scripts. At least it didn't do that a few years ago

Re: central administration techniques

2001-10-19 Thread Alson van der Meulen
On Fri, Oct 19, 2001 at 06:33:43PM +0300, Juha J?ykk? wrote: 3. Break into one of the other machines, use the suided script to ^ I can't answer your questions - I know too little. Just one remark: AFAIK, Linux doesn't support

Re: central administration techniques

2001-10-19 Thread Alson van der Meulen
On Fri, Oct 19, 2001 at 05:54:28PM +0300, Juha J?ykk? wrote: I was wondering if there are any secure methods of centrally managing the versions of certain files on Debian machines. I currently have a woody, two sids and several potatos which need to be kept up to date. The security patches

Re: central administration techniques

2001-10-19 Thread Juha Jäykkä
changes via cvs to a nfs mount, all the client machines download changes via a cron job. Whoooa... nfs? Security++... I could consider using some secure networked file system, though but I doubt cron would be a good idea. Or maybe it is. Anyone any concerns? Another thing that crossed my

Re: central administration techniques

2001-10-19 Thread nrvale0
maybe have a look at cfengine? or apt-cache search / freshmeat / google for other options I was down this road just a few months ago. cfengine is nice except that the author doesn't believe that 'administrative information' is something that should be protected and thus has no plans to move

Re: central administration techniques

2001-10-19 Thread Petro
On Fri, Oct 19, 2001 at 09:41:22AM -0700, nrvale0 wrote: maybe have a look at cfengine? or apt-cache search / freshmeat / google for other options I was down this road just a few months ago. cfengine is nice except that the author doesn't believe that 'administrative information' is

Re: central administration techniques

2001-10-19 Thread Vineet Kumar
* Juha J?ykk? ([EMAIL PROTECTED]) [011019 07:57]: I was wondering if there are any secure methods of centrally managing the versions of certain files on Debian machines. I currently have a woody, two sids and several potatos which need to be kept up to date. The security patches are not much