Re: 2.0.4 partially fixes "hosts" problem.

[Mark . Burgess]

This is a a problem in your DNS?? If you don't want this check, then
you should specificy SkipVerify. But reverse lookup *ought to be possible*,
or am I misunderstanding your point?

M



On  2 Sep, Martin A. Brooks wrote:
> Hi
> 
> Following an upgrade to 2.0.4, I can confirm that the "hosts" problem I 
> found and previously reported no longer causes cfservd to crash - it does 
> however, still cause problems.
> 
> 
> On one client machine, if I edit /etc/hosts and add an entry like:
> 
> 10.4.18.61   foobar
> 
> I then run  cfagent -v -q and  on the server  I see....
> 
> -------------- SNIP --------------------
> Installable classes = ( )
> Listening for connections ...
> Socket caller address appears honest (10.4.18.61 matches 10.4.18.61)
> admin1.lon4.fastsearch.net: Socket originates from 
> 10.4.18.61=foobar.lon4.fastsearch.net
> admin1.lon4.fastsearch.net: Unable to lookup foobar.lon4.fastsearch.net
> admin1.lon4.fastsearch.net: getaddrinfo: Undefined error: 0
> admin1.lon4.fastsearch.net: Host authorization/authentication failed or 
> access denied
> admin1.lon4.fastsearch.net: From (host=?,user=?,ip=::ffff:10.4.18.61)
> Socket caller address appears honest (10.4.18.61 matches 10.4.18.61)
> admin1.lon4.fastsearch.net: Socket originates from 
> 10.4.18.61=foobar.lon4.fastsearch.no
> admin1.lon4.fastsearch.net: Unable to lookup foobar.lon4.fastsearch.no
> admin1.lon4.fastsearch.net: getaddrinfo: Undefined error: 0
> admin1.lon4.fastsearch.net: Host authorization/authentication failed or 
> access denied
> admin1.lon4.fastsearch.net: From (host=?,user=?,ip=::ffff:10.4.18.61)
> Socket caller address appears honest (10.4.18.61 matches 10.4.18.61)
> admin1.lon4.fastsearch.net: Socket originates from 
> 10.4.18.61=foobar.lon4.fastsearch.no
> admin1.lon4.fastsearch.net: Unable to lookup foobar.lon4.fastsearch.no
> admin1.lon4.fastsearch.net: getaddrinfo: Undefined error: 0
> admin1.lon4.fastsearch.net: Host authorization/authentication failed or 
> access denied
> admin1.lon4.fastsearch.net: From (host=?,user=?,ip=::ffff:10.4.18.61)
> Socket caller address appears honest (10.4.18.61 matches 10.4.18.61)
> admin1.lon4.fastsearch.net: Socket originates from 
> 10.4.18.61=foobar.lon4.fastsearch.no
> admin1.lon4.fastsearch.net: Unable to lookup foobar.lon4.fastsearch.no
> admin1.lon4.fastsearch.net: getaddrinfo: Undefined error: 0
> admin1.lon4.fastsearch.net: Host authorization/authentication failed or 
> access denied
> admin1.lon4.fastsearch.net: From (host=?,user=?,ip=::ffff:10.4.18.61)
> Socket caller address appears honest (10.4.18.61 matches 10.4.18.61)
> admin1.lon4.fastsearch.net: Socket originates from 
> 10.4.18.61=foobar.lon4.fastsearch.no
> admin1.lon4.fastsearch.net: Unable to lookup foobar.lon4.fastsearch.no
> admin1.lon4.fastsearch.net: getaddrinfo: Undefined error: 0
> admin1.lon4.fastsearch.net: Host authorization/authentication failed or 
> access denied
> admin1.lon4.fastsearch.net: From (host=?,user=?,ip=::ffff:10.4.18.61)
> -------------------------- SNAP -----------------------------
> 
> The server is trusting the client to convert the IP address of the client 
> to a FQDN, where this is bogus, you will always get this error.
> 
> 
> Regards
> 
> Mart.
> 
> 
> 
> _______________________________________________
> Help-cfengine mailing list
> Help-cfengine@gnu.org
> http://mail.gnu.org/mailman/listinfo/help-cfengine



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Work: +47 22453272            Email:  Mark.Burgess@iu.hio.no
Fax : +47 22453205            WWW  :  http://www.iu.hio.no/~mark
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~