RE: Help with file: checksum=md5

[Andrews, Martin]

Michael,

You need to send ChecksumUpdates to change entries in the database. I have a
section like:

control:
    # Define this if you want to update the checksum database (after
    # updating the OS, for instance).

    newsum::
    ChecksumUpdates = ( on )


And then run "cfengine --define newsum" when I want to update the database.

Martin

> -----Original Message-----
> From: Michael Coffman [mailto:coffman@ftc.agilent.com]
> Sent: Friday, September 22, 2000 2:04 PM
> To: help-cfengine@gnu.org
> Subject: Help with file: checksum=md5
> 
> 
> 
> Okay,  Thanks to the help of Patrice Guerlais and Mark Burgess.  I was
> able to get cfengine compiled with BerkelyDB.  Now I have the 
> following 
> problem.  Here is the relavant portion of the config file I 
> am using on the
> client:
> 
> copy:
>   $(remotefiles)/motd
>   dest=/etc/motd
>   mode=0444
>   server=colonel
>   define=cp_motd
> 
> files:                    # i have to use the action=touch to 
> get cp_motd
>   $(localfiles)/motd      # defined
>   checksum=md5
>   action=touch
>   define=cp_motd
> 
> shellcommands:
>   cp_motd::
>     "/usr/bin/echo hello > /tmp/cfengine.out"
> 
> 
> The copy does what I would expect updating the file if it is 
> different than
> the servers copy.  The files section sets the define if the 
> checksum is
> different, and the shellcommand executes.
> 
> The md5 entry in the cached database of file checksums does 
> not update as
> the documentation seems to indicate that it should.  Each time I run 
> cfengine, I get the error:
> 
>  
> >---------------------------------------------------------------------
>  >Checking files
>  
> >---------------------------------------------------------------------
> 
>  >Checking file(s) in /var/opt/sa/config/local-files/motd
>  >cfengine:joker: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
>  >cfengine:joker: SECURITY ALERT: Checksum for
>  >/var/opt/sa/config/local-files/motd changed!
>  >cfengine:joker: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
>  >Saving the setuid log in /var/run/cfengine/cfengine.joker.log
> 
> According to the docs, 
> 
>      "Security warning messages are issued only once and the value in
>      the database is then changed to the
>        new value of the file automatically"
> 
> 
> Thanks for any help.
> 
> -MichaelC
> ------------------------------------------------------------------
> -- Life is lived forward but understood backward.
> 
> _______________________________________________
> Help-cfengine mailing list
> Help-cfengine@gnu.org
> http://mail.gnu.org/mailman/listinfo/help-cfengine
>