Re: cfrun; Host authentication failed.

[Dr. C. Scheffczyk]

Hi,

only my solution of the problem, just in case if someone else
has similar difficulties:

>Take a look at the checklist for upgrading at www.cfengine.org/docs
>You need to specify "trustkey=true" and "TrustKeysFrom = ( )"
>in the cfagent.conf anf cfservd.conf files respectively,

This was not the problem. (as I said in my previous posting, key-setup
was o.k.)
I had to give access explicitely to the user root in cfservd.conf with the line

AllowUsers = ( root )

access = ( root ) didn't work ? Can someone confirm this behaviour ?

In addition I didn't include the statement

--------------------------------------------------------

grant:

   # Grant access to all hosts at example.org.
   # Files should be world readable

 /var/cfengine/bin      *.mydomain.de
 
--------------------------------------------------------

which was also neccessary. (I didn't understand that from the docs, I thought
to give access to the masterfilesystem would be enough ?!)

>good luck!

Thank you.

>PS - I worked quite hard to write some documentation for
>this, so please look at it!!

I did it, believe me, and not only once !!!

>On 12 Feb, Dr. C. Scheffczyk wrote:
>> Hello,
>> 
>> I try to setup cfengine 2.0.a23.
>> Compilation/Installation works fine with the exception of the docs:
>> 
>> Making all in doc
>> make[1]: Entering directory `/export/SysAdmin/cfengine/cfengine-2.0.a23/doc'
>> make[1]: *** No rule to make target `cfengine.8', needed by `all-am'.  Stop.
>> make[1]: Leaving directory `/export/SysAdmin/cfengine/cfengine-2.0.a23/doc'
>> make: *** [all-recursive] Error 1
>> 
>> I think problem is known ?
>> 
>> As a first test I tried to ping a machine (surz19) from my master (surz24)
>> using cfrun, but without success. Here's the result:
>> 
>> root@surz24: /usr/local/sbin/cfrun surz19 -- -p
>> cfrun(0):         .......... [ Hailing surz19.hrz.uni-marburg.de ] ..........
>>  Host authentication failed. Did you forget the domain name?root@surz24: 
>> 
>> Keys are setup properly (I hope). Running the daemon cfservd in debug mode
>> ( -d2 ) on surz19 gives ( a lot of output skipped ):
>> 
>> ...
>> Received: [EXEC  -p ] on socket 5
>> User root is not allowed on this server
>> surz19: Host authorization/authentication failed or access denied
>> Transaction Send[t 64][Packed text]
>> SendSocketStream, sent 72
>> surz19: From (host=surz24a3.hrz.uni-marburg.de,user=root,ip=137.248.3.127)
>> ...
>> 
>> I think the important line is "User root ...".
>> Can anybody give me a hint what that means ?
>> In cfagent.conf and cfservd.conf the line access = ( root ) exists.
>> Error appears with and without this statement.
>> 
>> Thank you!
>> Christian
>> 
>> C. Scheffczyk (Scheffczyk@HRZ.Uni-Marburg.DE)
>> ---------------------------------------------------------------
>> HRZ, Hans Meerwein Strasse,        Fon: +49 (0)6421/28-23519
>> D-35032 Marburg, Germany           Fax:               -26994
>
>
>
>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>Work: +47 22453272            Email:  Mark.Burgess@iu.hio.no
>Fax : +47 22453205            WWW  :  http://www.iu.hio.no/~mark
>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
>
>
>_______________________________________________
>Help-cfengine mailing list
>Help-cfengine@gnu.org
>http://mail.gnu.org/mailman/listinfo/help-cfengine

C. Scheffczyk (Scheffczyk@HRZ.Uni-Marburg.DE)
---------------------------------------------------------------
HRZ, Hans Meerwein Strasse,        Fon: +49 (0)6421/28-23519
D-35032 Marburg, Germany           Fax:               -26994