Sounds like a job for cfengine! I'd never paid much attention to it before using FAI but it's seriously cool stuff for managing conf files. On Sun, Aug 10, 2003 at 05:27:18PM +1000, LapTop006 wrote: > YES! > I manage around 30 debian systems, all are installed by first installing > the image that we use for clients, then we have to modify them to talk > to our LDAP server, unfortunatly because debian won't put in default pam > files for other packages to include (There have been several rants about > this on d-d, correct package would be libpam-modules) we have to modify > EVERY PAM FILE BY HAND (Becuase several packages have strange orderings > of pam modules that can cause breakage in the situation where you first > auth against LDAP but fall back to files). This would be a simple change > to pam-modules and ONE conffile update to all packages that use pam that > would make these kind of situations MUCH easier to deal with. -- Martijn van Oosterhout <kleptog@svana.org> http://svana.org/kleptog/ > "All that is needed for the forces of evil to triumph is for enough good > men to do nothing." - Edmond Burke > "The penalty good people pay for not being interested in politics is to be > governed by people worse than themselves." - Plato
Attachment:
pgpN65y8_875y.pgp
Description: PGP signature