Re: ACL cf_served

On Tue, 2022-05-03 at 23:02 -0700, thierry thunot wrote:
> Hi all, 
> I have a question about ACL.
> Is there any solution with ACL to allow acces toHello everyone, I have a question about ACLs and
> cf_served. Is it possible to give access to the cfengine server to clients who have dynamic ip
> addresses using ppkeys and not ip addresses. especially for allowsconnects. 
> I created a def.json with example entries
> 
> {
>                 "vars":
>         {
> 
>         "acl":[
>                                 "192.168.10.0/24",
>                                 "82.05.15.27"
>                  ]
>         }
> }
> 
> the problem is that after registering the client, in a known network, on the server for a laptop,
> he no longer has access to the cfengine server if his IP has changed. Should I go through a vpn?
> to have a Fixed ip or is there another easier way to continue to manage the laptop by cfengine
Hi Thierry,
short answer is CFE-3448 [1]. Long answer is that a PR [2] implementing restriction by key was
merged in February and so the feature is available in our master nightlies [3] and will be part of
the upcoming 3.20.0 release.

[1] https://tracker.mender.io/browse/CFE-3448
[2] https://github.com/cfengine/core/pull/4332
[3] https://cfengine.com/downloads/cfengine-community-nightly/

Hope this helps.

--
Vratislav

-- 
You received this message because you are subscribed to the Google Groups "help-cfengine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion on the web visit https://groups.google.com/d/msgid/help-cfengine/54c2b409bbb58369e60f0b497b9fc8ba74fdbd5b.camel%40northern.tech.