Re: ACL cf_served

Thanks Vratislav!
will this also work for a client to a server? It's not basically between 
two servers? We can then on the server authorize the clients with their 
ppkey to download the promises?



Le mercredi 4 mai 2022 à 08:13:21 UTC+2, [email protected] a 
écrit :

> On Tue, 2022-05-03 at 23:02 -0700, thierry thunot wrote:
> > Hi all, 
> > I have a question about ACL.
> > Is there any solution with ACL to allow acces toHello everyone, I have a 
> question about ACLs and
> > cf_served. Is it possible to give access to the cfengine server to 
> clients who have dynamic ip
> > addresses using ppkeys and not ip addresses. especially for 
> allowsconnects. 
> > I created a def.json with example entries
> > 
> > {
> >                 "vars":
> >         {
> > 
> >         "acl":[
> >                                 "192.168.10.0/24",
> >                                 "82.05.15.27"
> >                  ]
> >         }
> > }
> > 
> > the problem is that after registering the client, in a known network, on 
> the server for a laptop,
> > he no longer has access to the cfengine server if his IP has changed. 
> Should I go through a vpn?
> > to have a Fixed ip or is there another easier way to continue to manage 
> the laptop by cfengine
> Hi Thierry,
> short answer is CFE-3448 [1]. Long answer is that a PR [2] implementing 
> restriction by key was
> merged in February and so the feature is available in our master nightlies 
> [3] and will be part of
> the upcoming 3.20.0 release.
>
> [1] https://tracker.mender.io/browse/CFE-3448
> [2] https://github.com/cfengine/core/pull/4332
> [3] https://cfengine.com/downloads/cfengine-community-nightly/
>
> Hope this helps.
>
> --
> Vratislav
>

-- 
You received this message because you are subscribed to the Google Groups "help-cfengine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion on the web visit https://groups.google.com/d/msgid/help-cfengine/1b3bf7a9-5ac6-4fea-9ef7-62144231a4e6n%40googlegroups.com.