managing passwords

[Achim Bohnet]

On Tuesday, 10. April 2007, Rudy Gevaert wrote:
> Hello,
> 
> I'm looking into softupdate and have a question about password management.
> 
> E.g. we have a slapd.conf file that needs a a password in it.  Up till 
> now (not using softupdate) I fcopy the slapd.conf file on installation, 
> and then afterwards I put the password in it.
> 
> If I would use softupdate and fcopy copies each time the template I 
> would have to edit it each time.
> 
> But on the otherhand there shouldn't be any local modified files... so 
> you would have to put the passwords on the install server.   But each 
> install server can be mounted from any machine that is hooked onto the 
> installation subnet...
> 
> How are you handling passwords in your environment?

I've soon the same problem ;)  I plan to look into cfengine2 to distribute
these files.  Alternatively try to patch fai-chboot to manage /etc/export:
add on ip on add or enable. remove nfs export on fai-chboot -r.

Achim
> 
> Thanks in advance,
> -- 
> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> Rudy Gevaert          Rudy.Gevaert at UGent.be          tel:+32 9 264 4734
> Directie ICT, afd. Infrastructuur ICT Department, Infrastructure office
> Groep Systemen                    Systems group
> Universiteit Gent                 Ghent University
> Krijgslaan 281, gebouw S9, 9000 Gent, Belgie               www.UGent.be
> -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
> 
> 



-- 
  To me vi is Zen.  To use vi is to practice zen. Every command is
  a koan. Profound to the user, unintelligible to the uninitiated.
  You discover truth everytime you use it.
                                      -- reddy at lion.austin.ibm.com