Re: cfrun help

[Alan Silver]

Just wanted to let you all know that I have it all running now. What I
needed to do (and probably should've done from the outset is include 

  AllowUsers = ( root )

in the cfservd.conf file

alan

Alan Silver wrote:
> 
> HI all:
> 
> I am running cfengine 2.0.1 on a few Solaris 8 servers.
> I haven't tried using cfrun in a while, but now I am starting to use it
> more.
> I am trying to run it on one of systems (ankaa) with command:
> cfrun -v nekkar
> 
> When I try to run it I get
> 
> Address given by nameserver: 199.94.20.186
> Loaded /var/cfengine/ppkeys/localhost.priv
> Loaded /var/cfengine/ppkeys/localhost.pub
> Looking for a source of entropy in /var/cfengine/randseed
> cfrun(0):         .......... [ Hailing nekkar.hbs.edu ] ..........
> Connecting to server nekkar.hbs.edu to port 0 with options
> Loaded /var/cfengine/ppkeys/root-199.94.41.104.pub
> Connect to nekkar.hbs.edu = 199.94.41.104 on port cfengine
> Loaded /var/cfengine/ppkeys/root-199.94.41.104.pub
> cfrun:ankaa.hbs.edu: Strong authentication of server=nekkar.hbs.edu
> connection confirmed
> nekkar.hbs.edu replies..
> 
>  Host authentication failed. Did you forget the domain
> name?cfrun:ankaa.hbs.edu: Couldn't recv
> cfrun:ankaa.hbs.edu: recv
> Connection with nekkar.hbs.edu completed
> 
> Now, I have all my keys in place and I copy from one machine to the
> other, so I don't think that that is a problem. The other thing that I
> thought it might be was my cfservd.conf on nekkar. Here is what that
> looks like:
> 
> control:
> any::
>   domain = ( hbs.edu )
>   AllowConnectionsFrom        = ( 199.94.41.104 199.94.20.186  )
>   LogAllConnections = ( true )
>   TrustKeysFrom = ( 199.94.41.104 199.94.20.186 )
>   cfrunCommand = ( "/var/cfengine/bin/cfagent -v -f cf.update" )
> 
> #########################################################
> 
> admit:   # or grant:
>    any::
>        /var/cfengine/bin          *.hbs.edu
>        /var/cfengine/inputs       *.hbs.edu
>        /var/cfengine/inputs/files       *.hbs.edu
> 
> Also, cfrun.hosts looks like:
> domain=hbs.edu
> access=root
> #outputdir=/var/cfengine/cfrun
> 
> nekkar
> 
> Any thoughts on what I can check out?
> 
> Thanks
> 
> alan
> --
> Alan Silver
> UNIX Systems Administrator
> Harvard Business School
> 
> 617-495-5801
> asilver@hbs.edu
> 
> "The two prime movers of the Universe are Time and Luck"
>    -- Kurt Vonnegut
> 
> _______________________________________________
> Help-cfengine mailing list
> Help-cfengine@gnu.org
> http://mail.gnu.org/mailman/listinfo/help-cfengine

-- 
Alan Silver
UNIX Systems Administrator
Harvard Business School

617-495-5801
asilver@hbs.edu

"The two prime movers of the Universe are Time and Luck"  
   -- Kurt Vonnegut