conjur-cookbooks / terminal-login

Installs Conjur PAM+LDAP - deprecated
0 stars 0 forks source link

/etc/conjur.identity is malformed #7

Open kgilpin opened 9 years ago

kgilpin commented 9 years ago

Indenting is wrong. Also the "machine" entry doesn't match the expectations of the other tools, which is https://conjur/api/authn

dividedmind commented 9 years ago

Identation shouldn't be significant -- the manpage indicates that the tokens can be separated by space, tab or newlines (and presumably a combination thereof).

It also indicates that "machine" entry should be the machine name. I made logshipper lenient in both regards, but figured that the cookbook should emit proper entries.

So, in fact, the netrc is (was) well-formed; maybe it should be fixed in other tools instead (or: too, and then reverted here to well-formed as the new versions get released).

kgilpin commented 9 years ago

Sure we can correct / relax the cli netrc behavior in a future version.

On Dec 9, 2014, at 7:41 AM, Rafał Rzepecki notifications@github.com wrote:

Identation shouldn't be significant -- the manpage indicates that the tokens can be separated by space, tab or newlines (and presumably a combination thereof).

It also indicates that "machine" entry should be the machine name. I made logshipper lenient in both regards, but figured that the cookbook should emit proper entries.

So, in fact, the netrc is (was) well-formed; maybe it should be fixed in other tools instead (or: too, and then reverted here to well-formed as the new versions get released).

— Reply to this email directly or view it on GitHub.