similar to: Best practice for users/groups on solaris

Displaying 20 results from an estimated 6000 matches similar to: "Best practice for users/groups on solaris"

2009 Apr 21
1
realizing virtual ssh_authorized_key
I''m trying to use ssh_authorized_key to manage my user''s ssh keys. I basically have this (across a couple of files): class user::virtual { @user { "seph": ensure => "present", uid => "2001", comment => "seph", home => "/home/seph", shell =>
2008 Nov 10
10
Appending a file to an existing file
Hi, I have a template file which I would like to append to an existing file (in this case I wish to add a few lines to /etc/motd). Unless I''ve missed it, it does not appear that file has an append option. Is there an easy way copy to the end of a file Thanks Paul --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google
2008 Aug 11
6
Class dependency question
So I have two classes for openvz setup. The first is openvz::setup and it sets up the box for OpenVZ.. then another class (in same .pp file) called openvz::master sets up the config for the main system (as opposed to a VE). The error I see is that the openvz::master class is executed (and fails) becuase it doesn''t seem to load up the setup class? debug: Calling puppetmaster.getconfig
2007 Nov 20
5
Solaris 10 Jumpstart instructions on the wiki now
Not that I''m much of a Solaris guy, and definitely not a Solaris 10 guy, but since nobody else had posted anything yet: http://reductivelabs.com/trac/puppet/wiki/PuppetSolaris#Solaris10 The good news is that it appears to be a completely hands-off puppetd installation. Just sign the client key afterwards on the puppetmaster and you''re set. The bad news is that it''s
2007 Jul 01
5
Mount and fstab problems with large devices?
I''m trying to get a new file server managed by puppet from day 1, at least as much as possible. At the moment, though, there''s two issues I''m running into: 1. fstab should have entries for my comically-large RAID, but doesn''t. 2. each puppet run appears to remount the RAID, even when no rules in the manifest change. I suspect the issue may be in parsing
2009 Apr 26
5
Factor questions
Hello, I''m new to puppet and facter. Initially we are planning on using facter/puppet to inventory machines (Mac, Ubuntu, and RHEL). We plan on writing a number of custom facts. Obviouly some of the facts will only be specific to some OSs. I know there is a "confine" method, but it confuses me. It seems the confine statement in some of the recipes and in the Turnbull book is
2007 Jun 08
5
Help needed with a basic recipe
Can anyone point me to a "Writing Puppet recipes for Dummies" doc? I''m trying to do a basic probe using lspci to see if I have a Qlogic HBA installed on the machine, and if so, install the Qlogic scli package. Here''s a shell script of what I''m trying to do: #!/bin/bash vendor=1077 # QLogic model=2422 # 24xx hba /sbin/lspci -n -d $vendor:$model | grep
2008 Nov 20
9
create a file only if directory exists
I''m trying to create a virtual host file only if the document root directory exists. It doesn''t look like puppet is seeing the require metaparameter. Currently, the file is being created whether or not the document root directory exists. What is the best way to currently do this? I''m trying to create a file called site1.conf in /apps/apache/conf.d only if
2007 Nov 13
2
new to puppet - can puppet push its content to remote servers?
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I was made aware of puppet a few weeks ago and I really like the way things are working. What I liked at cfengine was the capability to push content from the central server to any node. There was no need to open a port from DMZ or any other remote system to the central server. Is there a similar way within puppet? How is this solved by other
2008 Sep 04
8
Potential new puppet user: two questions
Hello, I am examining whether puppet meets our needs. I can''t find the answer to two questions I am looking to answer, hopefully someone can help. 1. Can puppet be used to manage different classes of the same computers, e.g. do something on the apache test farm, if it works then do it on the apache live farm; and is this done cleanly? 2. How are package updates (e.g. yum update/yum
2007 Oct 02
6
Push /home/* directories recursively to clients
Hi I am trying to push populate /home & subdirectories from the puppet server to all the Linux clients. I managed this with cfengine using rsync. But I am not sure how do I achieve this in puppet, do we have any inbuilt function for this. Also, is there a function for userdel like for useradd (user) groupadd(group). Any suggestion is appreciated. -- Deepak
2007 Dec 04
10
Using puppet to manage user access to servers.
I''m guessing this is a common use case, but I wasn''t able to find anything in the site FAQ. We''re looking at using Puppet on about 100 servers to control which user groups have access to which servers. The use case is as follows: We have Groups of servers, for example: CUSTOMERservers (serverA, serverB, ...,serverK) ADMINISTRATIVEservers
2007 Nov 12
2
How to keep several puppetd in sync at the same time ?
Hi, I''m still writing my djbdns module, I came to the following design issue with master and slave tinydns. Normally there is no such master and slave distinction in djbdns: all tinydns instance are equal. Usually one instance on one host is considered the master on, which the RR are changed, and when you need to propagate them, you rsync the datas to the other hosts, where they will be
2007 Jul 06
5
The puppet model
It seems to me that when you have a master server and a client computer, the master doesn''t really need to know the implementation details of the client computer. It''s kinda like a browser from my perspective...the server is just telling the browser what needs to be drawn on the local side. Does the puppet model work like this? If not, I guess what I read didn''t
2007 Sep 08
19
Group changes made over and over?
Hi, I have several Debian servers with puppet 0.23.2. Part of my manifest looks like this: class virt_all_users { @group { "andy": ensure => "present", gid => "1000" } @user { "andy": ensure => "present", uid => "1000",
2007 May 22
4
Newbie: Am I looking at the right tool?
Hi, I''m absolutely new to centralized server management, sorry sorry in advance for any stupid remarks. Looking on the puppet documentation, I mainly find a lot of info about how to manage the config files, but nothing about centralized control. So I''m wandering if I''m looking a the right software package for my needs. I want to be able to do the following from a
2008 Apr 04
3
Issues with mirroring directories with puppet
It''s my understanding that if a file exists under a directory on the puppet client but doesn''t exist under directory on the puppet server server and puppet manages that directory on the client, that it won''t delete that file on the client. I''m trying to keep certain directories synchronized with the puppet server,. It seems that the standard file operations
2009 May 09
3
using yum and puppet simultaneously
Hi, once i have my puppet set up and installed how does updating occour, if for example i have a package httpd instaledd on all my servers and there is an update to this package will i still need to log into every machine to run the updater or will puppet notice that the package is not at the latest level and update acordingly? Thanks --~--~---------~--~----~------------~-------~--~----~ You
2007 Mar 29
4
wondershaper and dmzs
I have a pretty simple setup. I''ve got a linux nat box, with some internal hosts. I''ve also got some servers in a dmz. It looks something like this: Internet | (external network) | | | | linux dmz nat hosts |
2009 Mar 28
1
Help with moving ssh keys around
I''m very new at puppet, but I''ve almost managed to get to the point where my puppet server sets up all the basics of a new linux box for me. The last piece of the puzzle is backups. The way I do backups is fairly simplistic. I just use mysqldump and tar to create local backup files and then scp them to a central host once a day. In order to set this up, I have to create a key