Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a group of servers authenticating against an LDAP server. I would like to be able to periodically update the /etc/ldap.secret file with an updated secret. I've written a small script that reads a list of hosts in from a file and uses SSH to update all the servers but I keep getting a nagging feeling that there must be a better tool or method.

share|improve this question
up vote 2 down vote accepted

You might want to look at a configuration management utility. The big ones are:

Basically instead of spewing commands at a list of servers in an ssh loop, you describe the state you want a server to be in and the CMU will do what is needed to get it there. You can configure them to poll a master server every X minutes/hours for changes or you can push changes out to a list of servers when you wish. They have stuff built in to them to account for different distros, package managers, etc.

If the CMU is overly complex for your needs, there's some tools that are like ssh loops but with better control/logic:

And if your needs are very very simple, an ssh loop will work but investing time in to building your infrastructure right will pay off later.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.