agent_auth and authd recipes - #48
Merged
Merged
Conversation
chewi
force-pushed
the
authd
branch
2 times, most recently
from
November 10, 2015 14:23
580d462 to
a78af3f
Compare
chewi
force-pushed
the
authd
branch
2 times, most recently
from
November 18, 2015 17:29
06dfe96 to
b9e0acc
Compare
Contributor
Author
|
This has now been rebased on #53. |
Contributor
Author
|
Rebased. |
This was referenced Mar 29, 2016
Closed
I'm not keen on the SSH solution, especially with both agent and server certificate verification arriving in 2.9 so I've added these recipes. They support the new certificate options but I haven't tested those yet. Only a systemd init script is provided for authd. Sorry about that. You can easily test these recipes yourself using Kitchen. Converge the authd system first, then login, create a self-signed certificate, and converge again to start authd. On converging the agent_auth system, it should register automatically. You will need to converge the authd system one final time to actually get the server to start as client.keys would have been empty the first time around.
Contributor
Author
|
Well I didn't break it. 😛 |
|
This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
I'm not keen on the SSH solution, especially with both agent and server certificate verification arriving in 2.9 so I've added these recipes. They support the new certificate options but I haven't tested those yet.
This is based on my earlier packages pull request in #47. I'll rebase this one when that one gets merged, if necessary.
I really wanted to rename the existing client and server recipes to something less generic as the addition of this new approach now makes the cookbook confusing. However, I decided not to as I didn't want to upset the existing users. Perhaps now would be a good time for a clean break though as #47 will probably not be a seamless upgrade anyway. With certificate verification arriving in 2.9, perhaps this approach should replace the SSH solution entirely? The former certainly seems safer to me. Feedback on this point would be appreciated.
Only a systemd init script is provided for authd. Sorry about that.
You can easily test these recipes yourself using Kitchen. Converge the authd system first, then login, create a self-signed certificate, and converge again to start authd. On converging the agent_auth system, it should register automatically. You will need to converge the authd system one final time to actually get the server to start as client.keys would have been empty the first time around.