From 1be510f9529cb082f802408b472a77d074b394c0 Mon Sep 17 00:00:00 2001 From: Nicolas Vigier Date: Sun, 14 Apr 2013 13:46:12 +0000 Subject: Add zarb MLs html archives --- zarb-ml/mageia-sysadm/2011-January/002415.html | 81 ++++++++++++++++++++++++++ 1 file changed, 81 insertions(+) create mode 100644 zarb-ml/mageia-sysadm/2011-January/002415.html (limited to 'zarb-ml/mageia-sysadm/2011-January/002415.html') diff --git a/zarb-ml/mageia-sysadm/2011-January/002415.html b/zarb-ml/mageia-sysadm/2011-January/002415.html new file mode 100644 index 000000000..7e82849a6 --- /dev/null +++ b/zarb-ml/mageia-sysadm/2011-January/002415.html @@ -0,0 +1,81 @@ + + + + [Mageia-sysadm] passwords in puppet + + + + + + + + + +

[Mageia-sysadm] passwords in puppet

+ nicolas vigier + boklm at mars-attacks.org +
+ Mon Jan 24 09:28:08 CET 2011 +

+
+ +
Hello,
+
+We are using this ruby module to save passwords used by puppet in a csv
+file :
+http://www.devco.net/code/extlookup.rb
+and manifests/extlookup.pp in our puppet config.
+
+And we are saving all passwords in this file on valstar :
+/etc/puppet/extdata/common.csv
+
+As I don't know exactly how puppet and puppet master are working, I am
+wondering if access to any password from this file is possible from any
+node (if someone can modify puppet config on this node). This could be
+a problem if we start to manage with our puppet server some less trusted
+servers. Or if someone getting root access on only one of the server
+can access all the passwords.
+
+Does anyone know ?
+
+
+ + + + + + + + + +
+

+ +
+More information about the Mageia-sysadm +mailing list
+ -- cgit v1.2.1