csync_wizard.1m (2012 03)

c
csync_wizard(1M) csync_wizard(1M)
NAME
csync_wizard - The configuration wizard for the Configuration Engine (cfengine). csync_wizard is part of
the Distributed Systems Administration Utilities (DSAU).
SYNOPSIS
csync_wizard [-f filename | -h]
DESCRIPTION
The Configuration Synchronization Wizard (csync_wizard) helps set up a Configuration Engine (cfen-
gine) environment. cfengine is a policy-based configuration management tool. The administrator
creates a configuration-description file on the configuration master that defines the management actions
for cfengine to perform on each managed client. The administrator can use cfengine to perform tasks
such as:
synchronize a set of files across managed clients
disable inappropriately configured files on the client
check file permissions, ownership, and track checksum changes
make edits to files
execute arbitrary shell commands on each client
check for processes or signal processes
For additional detailed cfengine information, refer to the cfengine reference manual in
/opt/dsau/doc/cfengine. (For the current version of cfengine, see the DSAU Release Notes.)
While there are many manual steps required to configure a cfengine environment, the csync_wizard
guides the administrator through the steps to create the configuration master, allow managed-clients to
be added to and removed from the environment, and distribute the required security keys between the
configuration master and the managed clients.
The administrator must choose a system to act as the configuration master. This system can be a stan-
dalone system or a Serviceguard cluster.
Standalone system acting as the configuration master
In this configuration, cfengine’s master configuration description files and any reference files
that need to distributed to the managed clients reside in a designated directory on this stan-
dalone system.
Remote clients can include standalone systems and members of Serviceguard clusters. cfengine
securely communicates with the managed clients using a public/private key exchange mechan-
ism. The wizard helps the administrator distribute keys to managed clients but requires that
passwordless ssh be configured. See the csshsetup tool for details on configuring ssh. An alter-
native, but less secure, way to distribute cfengine keys is to use cfrun -T. Refer to the cfen-
gine reference manual for details.
Serviceguard cluster acting as the configuration master
In a Serviceguard cluster, cfengine can be configured as a highly available (HA) service using a
Serviceguard package. All members of the cluster must be up when running the wizard, and
cluster members are automatically configured as cfengine clients. The node hosting the pack-
age acts as the configuration master. Clients access the configuration master using its relocat-
able IP address.
For the intra-cluster-only case, the wizard performs the initial cfengine public/private key
exchange automatically, and no special ssh setup is required for the cluster members. When
using the wizard to add remote clients, ssh is required. See the ssh description in the Stan-
dalone system case above for details.
When configuring the cfengine master to run as part of a HA service using a Serviceguard pack-
age, several data points are required to establish the service. Refer to the "Prerequisites for
using the wizard" section of this man page for further details.
The wizard provides cfengine templates containing examples of common files that are synchron-
ized in a Serviceguard cluster.
If cfengine has previously been configured on the configuration master, any existing cfengine
configuration files are saved in the directory /var/opt/dsau/cfengine/backups. Files from the
HP-UX 11i Version 3: March 2012 1 Hewlett-Packard Company 1

Summary of content (4 pages)