mirror of
https://github.com/bstansell/conserver.git
synced 2024-12-22 06:07:49 +00:00
92 lines
2.9 KiB
CFEngine3
92 lines
2.9 KiB
CFEngine3
#
|
|
# This would be what i'd expect a more common configuration file would
|
|
# look like. There are consoles attached to multiple devices, simple
|
|
# access lists, etc.
|
|
#
|
|
|
|
# ------ define a user group ------
|
|
group sysadmin {
|
|
users bryan, todd, dave;
|
|
}
|
|
# helpers is everyone but the sysadmin group
|
|
group helpers {
|
|
users *, !sysadmin;
|
|
}
|
|
|
|
|
|
# ------ make sure breaks are the way we want --------
|
|
break 1 { string "\z"; }
|
|
break 2 { string "\r\d~\d^b"; delay 600; }
|
|
break 3 { string "#."; }
|
|
|
|
|
|
# ----- define some console types ------
|
|
# yeah, just setting a break doesn't quite seem worth it, but perhaps,
|
|
# some day, there will be more host-specific stuff.
|
|
default sun-std { break 1; }
|
|
default sun-alt { break 2; }
|
|
default sun-lom { break 3; }
|
|
|
|
|
|
# ------ defaults ------
|
|
# now for some generic console defaults so that we don't have to
|
|
# duplicate them for each console.
|
|
default * {
|
|
logfile /var/consoles/&; # '&' is replaced with console name
|
|
timestamp 1hab; # write timestamps
|
|
rw sysadmin; # allow sysadmins full access
|
|
ro helpers; # allow helpers to watch
|
|
master localhost;
|
|
include sun-std;
|
|
}
|
|
|
|
|
|
# --------- define our terminal attributes ----------
|
|
# simple tcp connections are "easy"
|
|
default cisco { type host; portbase 2000; portinc 1; }
|
|
default xyplex { type host; portbase 2000; portinc 100; }
|
|
|
|
# this is a cyclades card referenced with /dev/ttyC0 through /dev/ttyC31
|
|
# (referenced as ports 1 through 32 in conserver.cf)
|
|
# we set the various port calculation bits and pattern substitution to
|
|
# come up with a generic definition
|
|
default cyclades { type device; device /dev/ttyC&; baud 9600; parity none;
|
|
devicesubst &=Pd; portbase -1; portinc 1; host unused; }
|
|
|
|
## this is a term server accessed with an ssh command
|
|
# it too uses pattern substitution and such to get the job done
|
|
default ciscossh { type exec; portbase 2000; portinc 1;
|
|
exec /usr/local/bin/ssh -p P -l tsuser H;
|
|
execsubst H=hs,P=Pd; }
|
|
|
|
|
|
# ------- define the consoles on ts1.conserver.com --------
|
|
default ts1.conserver.com { include cisco; host ts1.conserver.com; }
|
|
console web1.conserver.com { include ts1.conserver.com; port 2; }
|
|
console ns1.conserver.com { include ts1.conserver.com; port 10; }
|
|
|
|
# ------- define the consoles on ts2.conserver.com --------
|
|
default ts2.conserver.com { include xyplex; host ts2.conserver.com; }
|
|
console web2.conserver.com { include ts2.conserver.com; port 4; }
|
|
console ns2.conserver.com { include ts2.conserver.com; port 22; }
|
|
|
|
# ------- define the consoles on ts3.conserver.com --------
|
|
default ts3.conserver.com { include ciscossh; host ts3.conserver.com; }
|
|
console ftp1.conserver.com { include ts3.conserver.com; include sun-lom;
|
|
port 7; }
|
|
|
|
|
|
# ------- set up the an access list to avoid the default -------
|
|
# anything *not* matched here will fallback to the default access mode
|
|
access * {
|
|
trusted 127.0.0.1;
|
|
allowed 10.0.0.0/8;
|
|
}
|
|
|
|
# ------- do some server configuration ---------
|
|
config * {
|
|
defaultaccess rejected;
|
|
daemonmode on;
|
|
logfile /var/log/conserver;
|
|
}
|