From owner-freebsd-stable@FreeBSD.ORG Tue Nov 20 23:50:15 2007 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3DCDC16A420 for ; Tue, 20 Nov 2007 23:50:15 +0000 (UTC) (envelope-from kurt.buff@gmail.com) Received: from qb-out-0506.google.com (qb-out-0506.google.com [72.14.204.224]) by mx1.freebsd.org (Postfix) with ESMTP id 06D4B13C442 for ; Tue, 20 Nov 2007 23:50:14 +0000 (UTC) (envelope-from kurt.buff@gmail.com) Received: by qb-out-0506.google.com with SMTP id a10so1403733qbd for ; Tue, 20 Nov 2007 15:50:13 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=aTbRmDYwhKenLcvANZbH00TjUamvFUw+2ARI1Dhbw+c=; b=RJwLcqEu+mnjmPBz4tj6AD0HEQnPvCUl4JCFkaQXQzkSjkD8MCyXFJ9Gq3G4knwBg0FYCEWP7avVn8l3wGBp+Ho/TFGd0wSJvlaC8XQDK9Z5pt/fZKMLlZAMiT8b63tD19t+fSg/mB69WOZxZpKBJG8TY6JpUoFcSqeMFL1tNMs= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=Xj7H0I2F9YT01RPvcHlne1/NX+bGEj0ODIWHxrH2Yk8bkgGLHp2whI/3c9uMOU/NHLrpModTXkcr85fsizxCTY5nVXmmnJAK4CUWZVhX3mBHwg5IqoLMFwBGB2/Ikrc5vOKJ0whZl7u/Zj2w9CLRmi3/0Nn9QqY/DaPLsV9LU5Y= Received: by 10.142.97.20 with SMTP id u20mr1817634wfb.1195601713168; Tue, 20 Nov 2007 15:35:13 -0800 (PST) Received: by 10.142.72.20 with HTTP; Tue, 20 Nov 2007 15:35:13 -0800 (PST) Message-ID: Date: Tue, 20 Nov 2007 15:35:13 -0800 From: "Kurt Buff" To: "Julian H. Stacey" In-Reply-To: <200711202315.lAKNFa4R012904@fire.js.berklix.net> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <474325A0.7060802@gmail.com> <200711202315.lAKNFa4R012904@fire.js.berklix.net> Cc: freebsd-stable@freebsd.org, "Aryeh M. Friedman" Subject: Re: Software for distribution of configuration files and changes X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Nov 2007 23:50:15 -0000 On Nov 20, 2007 3:15 PM, Julian H. Stacey wrote: > > Karl M. Joch wrote: > > > Hello, > > > > > > i have searched alot for a software to: > > > > > > - distribut configuration files from one master to different > > > systems - maintain configuration files on one machine for all > > > systemes and then send it out - push the files, not download them > > > like cvsup - maintaining files for all systems and files only > > > affecting one system > > > > > > any ideas and hints would be greatly appreziatet. > > > > > > > Have you looked at aegis (aegis.sf.net)? > > One way is to use eg: > rlogin master_host ; su > cd /site; rdist -M 20 -P /usr/bin/ssh mylabel > & have various /etc & /usr/local/etc & httpd.conf etc files symbolic linked to > a parallel tree in per host copies of /site > Add > PermitRootLogin yes > to > /etc/ssh/sshd_config > To make rdist as root easier. > > Some people prefer rsync to rdist. rdist6 & rsync are in /usr/ports/net/ > There's doubtless other solutions too. Whichever technique is used, don't allow remote root login, if you value the security of your network. Proper use of sudo is probably the easiest way to avoid root in batch files. Kurt