logging and syslog

[Craig Nelson]

I am having some difficulty getting enough log data from my cfengine infrastructure to feel that my configs are performing properly. I've deployed a 2.0.3 server and 6 clients, all Linux boxes. Cfservd runs on the master server, and cfexecd runs on the clients in daemon mode.

1) I cannot get the cfservd server to log connections. My cfservd.conf files has this:

control:

 any::
  domain = ( tenzing.com )
  cfrunCommand = ( "/var/cfengine/bin/cfagent" )
  TrustKeysFrom = ( 10.115.0.0/16 )
  DenyBadClocks = ( off )
  IfElapsed = ( 1 )
  ExpireAfter = ( 15 )
  MaxConnections = ( 50 )
  MultipleConnections = ( true )
  LogAllConnections = ( on )
  syslog = ( on )

But all I ever get in syslog is entries like the following:
Aug 29 17:00:10 ts-master cfservd[20711]: Rereading config files /var/cfengine/inputs/cfservd.conf.

or some errors when I was playing with the syslog syntax:
Aug 29 19:52:43 ts-master cfservd: ts-master.corp.tenzing.com:/var/cfengine/inputs/cfservd.conf:21: Warning: Redefinition of macro LogAllConnections=syslog=on

The 6 clients connect via cfexecd at the top of every hour and nothing shows up in syslog.

Does anyone have suggestions about how can I get the connection logging to work?

2) I'm having difficulty getting cfagent (vi cfexecd) to produce detailed run logs. Setting inform and syslog on in the control area seems to have no effect. My only success was setting syslog and inform on for specific directives. Some directives (such as links) don't accept the syslog or inform directives.

While the per-directive control makes sense, I would prefer that the output saved by cfexecd in the outputs folder look just like a cfagent -v run so I can trace the actions taken and troubleshoot any logic errors in my configs.

Does anyone have any suggestions about how to get verbose run details to show up in the saved output log or in syslog when cfagent is invoked by cfexecd?

##cfagent.conf:

control:

  any::

# schedule is once an hour default by cfexecd
# schedule  = ( Min00_10 )
   TrustKeysFrom        = ( 10.115.1.20 )
   domain               = ( mydomain.com )
   master_cfinput       = ( /var/cfengine/inputs )
   masterfiles          = ( /var/cfengine/masterfiles )
   workdir              = ( /var/cfengine )
   cf_install_dir       = ( /usr/local/sbin )
   SplayTime            = ( 2 )
   actionsequence       = ( copy links disable files tidy shellcommands )
   IfElapsed            = ( 1 )
   ExpireAfter          = ( 10 )
# these seem to have no effect
   syslog               = ( on )
   Inform               = ( on )

copy:

  exodus::
    $(masterfiles)/etc/resolv.conf-exodus
                                dest=/etc/resolv.conf
                                type=sum
                                server=$(masterfileshost)
                                inform=true
                                syslog=true

... more junk ...

3) Let me conclude by saying "I LOVE CFENGINE!". It solves such a wide range of configuration management administration lifecycle problems in such elegant ways.

Thanks for your help ~Craig Nelson

-------------------------------------------------------------------------------------------
The contents of this email are confidential. If you are not, or believe you may not be, the intended recipient of this email, please let us know by reply and then delete it from your system. You should not copy the message or disclose its contents to anyone. No warranty or other assurance is given by us that this email is free of any virus or any other defect or error.