So... I was looking at the docs for ssh::auth at http://projects.puppetlabs.com/projects/1/wiki/Module_Ssh_Auth_Patterns. It seems like auth.pp runs on the puppet master rather than the client. How does that work exactly....? Doug. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
On Sat, Apr 30, 2011 at 6:21 PM, Douglas Garstang <doug.garstang@gmail.com>wrote:> So... I was looking at the docs for ssh::auth at > http://projects.puppetlabs.com/projects/1/wiki/Module_Ssh_Auth_Patterns. > > It seems like auth.pp runs on the puppet master rather than the client. How > does that work exactly....? > > Doug. > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to > puppet-users+unsubscribe@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/puppet-users?hl=en. >Hi Doug, I''m unclear what you''re asking. -- Cheers, Steven ----------------------- Steven Acres UNIX/Linux System Administrator -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
On Sat, Apr 30, 2011 at 3:36 PM, Steven Acres <admin@swatteksystems.com>wrote:> On Sat, Apr 30, 2011 at 6:21 PM, Douglas Garstang <doug.garstang@gmail.com > > wrote: > >> So... I was looking at the docs for ssh::auth at >> http://projects.puppetlabs.com/projects/1/wiki/Module_Ssh_Auth_Patterns. >> >> It seems like auth.pp runs on the puppet master rather than the client. >> How does that work exactly....? >> >> Doug. >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Puppet Users" group. >> To post to this group, send email to puppet-users@googlegroups.com. >> To unsubscribe from this group, send email to >> puppet-users+unsubscribe@googlegroups.com. >> For more options, visit this group at >> http://groups.google.com/group/puppet-users?hl=en. >> > > Hi Doug, > > I''m unclear what you''re asking. > >Hmmm... I''m not sure how else to ask it. Does auth.pp run on the puppet master or the clients? Doug. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
On Sat, Apr 30, 2011 at 7:01 PM, Douglas Garstang <doug.garstang@gmail.com>wrote:> On Sat, Apr 30, 2011 at 3:36 PM, Steven Acres <admin@swatteksystems.com>wrote: > >> On Sat, Apr 30, 2011 at 6:21 PM, Douglas Garstang < >> doug.garstang@gmail.com> wrote: >> >>> So... I was looking at the docs for ssh::auth at >>> http://projects.puppetlabs.com/projects/1/wiki/Module_Ssh_Auth_Patterns. >>> >>> >>> It seems like auth.pp runs on the puppet master rather than the client. >>> How does that work exactly....? >>> >>> Doug. >>> >>> -- >>> You received this message because you are subscribed to the Google Groups >>> "Puppet Users" group. >>> To post to this group, send email to puppet-users@googlegroups.com. >>> To unsubscribe from this group, send email to >>> puppet-users+unsubscribe@googlegroups.com. >>> For more options, visit this group at >>> http://groups.google.com/group/puppet-users?hl=en. >>> >> >> Hi Doug, >> >> I''m unclear what you''re asking. >> >> > Hmmm... I''m not sure how else to ask it. Does auth.pp run on the puppet > master or the clients? > > Doug. > > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to > puppet-users+unsubscribe@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/puppet-users?hl=en. >Are you by chance thinking that auth.pp is ... ''handling'' authentication de facto? (it doesn''t). Otherwise, the module provisions the ssh-{server,client} (install, setup, the daemon and provision the node''s keys and users) as specified. It''s actually a good working example of Virtual Resources http://docs.puppetlabs.com/guides/virtual_resources.html too. -- Cheers, Steven ----------------------- Steven Acres UNIX/Linux System Administrator -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
On Apr 30, 6:01 pm, Douglas Garstang <doug.garst...@gmail.com> wrote:> Hmmm... I''m not sure how else to ask it. Does auth.pp run on the puppet > master or the clients?In an agent/master setup, all Puppet manifests are compiled on the master into a node-specific catalog that is sent to and applied on the client. To the extent that by auth.pp "running" you mean specifically that particular file''s interpretation by the Puppet system, yes, it happens on the master. That is by no means the end of the story, however. It sounds like you have some specific concerns about the implications of that answer. You might receive more helpful responses if you inquired about whether and how some of those concerns are addressed by the module. John -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.