Dns-operations mailing list

[opennic AT lewman.us]

On Thu, 21 Jun 2012 12:43:01 -0500
Jamyn Shanley <jshanley AT gmail.com> wrote:

> Floating an idea here - it would greatly streamline things if we had a
> puppetmaster server and all the T1 servers were linked to it. The
> puppetmaster could even be only given permission to modify a few files
> - the root zone file as one example. If a specific T1 was having
> issues, was mis-configured, or whatever - an update could be pushed
> almost immediately.

I see the attraction in doing this, but it would freak my out to let
some unknown entity have root powers to change my bind config at will.

-- 
Andrew
pgp 0x6B4D6475