Re: cfrun problem

[Reenen Kroukamp]

Did you include:

domain         = ( my.domain )

in both your cfagent.conf and your cfservd.conf?

You also need to grant access to the directory accessed, eg in
your cfservd.conf, eg I have:

grant:
        /var/cfengine/masterfile/inputs   *.my.domain

It looks like you already have the other server's key files installed
in the ppkeys subdirectory of each server as

        root-ip.pub

So that looks fine

-Reenen

--
Reenen C Kroukamp <reenen@qualica.com>
Qualica Technologies (Pty) Ltd
http://www.qualica.com/


> -----Original Message-----
> From: Dori Seliskar [mailto:Dori.Seliskar@select-tech.si]
> Sent: 04 September 2002 11:52
> To: help-cfengine@gnu.org
> Subject: cfrun problem
> 
> 
> Hi list,
> 
> I have fresh installed cfengine 2.0.4 on Redhat 7.3 on server 
> and client.
> If I say cfagent -v -q on client everything works fine, but if I say 
> cfrun -f file on server I get message "authentication failed" although
> a line above states "Strong authentication ... of connection 
> confirmed".
> If I run cfservd on client with debug option it says 
> "Couldn't stat filename 
> from host ...".
> 
> What am I doing wrong?
> 
> Best regards,
> 
> Dori
> 
> Here is a sample output of cfrun 
> 
> 
> 
> [root@ldap-replica1 cfengine]# /usr/local/sbin/cfrun -v -f 
> cfrun/cfrun.some_hosts
> GNU Cfengine server daemon -
> 2.0.4
> Free Software Foundation 1994-2001
> Donated by Mark Burgess, Faculty of Engineering,
> Oslo University College, 0254 Oslo, Norway
> 
> --------------------------------------------------------------
> ----------
> 
> Host name is: ldap-replica1
> Operating System Type is linux
> Operating System Release is 2.2.18-cdhs
> Architecture = i686
> 
> 
> Using internal soft-class linux for host linux
> 
> The time is now Wed Sep  4 11:08:44 2002
> 
> 
> --------------------------------------------------------------
> ----------
> 
> Additional hard class defined as: 32_bit
> Additional hard class defined as: linux_2_2_18_cdhs
> Additional hard class defined as: linux_i686
> Additional hard class defined as: linux_i686_2_2_18_cdhs
> Additional hard class defined as: 
> linux_i686_2_2_18_cdhs__2_SMP_Sat_Mar_10_03_03_44_CET_2001
> 
> GNU autoconf class from compile time: compiled_on_linux-gnu
> 
> Address given by nameserver: 172.16.10.15
> Loaded /var/cfengine/ppkeys/localhost.priv
> Loaded /var/cfengine/ppkeys/localhost.pub
> Looking for a source of entropy in /var/cfengine/randseed
> cfrun(0):         .......... [ Hailing virgo.delo.si ] ..........
> Connecting to server virgo.delo.si to port 0 with options
> Loaded /var/cfengine/ppkeys/root-172.16.16.234.pub
> Connect to virgo.delo.si = 172.16.16.234 on port cfengine
> Loaded /var/cfengine/ppkeys/root-172.16.16.234.pub
> cfrun:ldap-replica1.: Strong authentication of 
> server=virgo.delo.si connection 
> confirmed
> virgo.delo.si replies..
> 
>  Host authentication failed. Did you forget the domain 
> name?cfrun:ldap-replica1.: Couldn't recv
> cfrun:ldap-replica1.: recv
> Connection with virgo.delo.si completed
> 
...