Re: cfengine errors

[Mark . Burgess]

Tracy -- you might need to install a key-pair on a new host. It looks as
though the config files are not being copied and that connection to a server
is failing due to missing authentication keys.

Do a cfagent -p -v to find the version being used.

Look in /var/cfengine/inputs for input files. and in /var/cfengine/ppkeys
for keys (localhost.pub etc). 

I'm afraid I have to go right now, but if you send some version info to
the list, we can cross fingers that someone in the US, or Europe working
late will help you,

(see also www.cfengine.org for docs)

good luck,
Mark

On  5 Nov, Tracy R Reed wrote:
> Greestings,
> 
> I have had the misfortune (although cfengine is clearly amazing software)
> of having a large cfengine project dumped into my lap in the middle of
> implementation after the original implementor of cfengine at our site
> (2000 hosts) had a car wreck and landed in the hospital. It's the classic
> example of the only person knowing how it all works stepping in front of a
> bus. Except my colleague ran his motorcycle into an SUV and lived to spend
> a long time in the hospital.  A couple weeks ago I knew nothing about
> cfengine. Now I don't know a whole lot more about it but I'm slowly
> getting there.
> 
> We have an automated expect script which deploys cfengine on our client
> systems but I suspect it has flaws. We have all errors sent to
> cfengine-errors@ and it is being bombarded (cfagent runs every 5 minutes)
> with mail related to authentication errors. A few examples:
> 
> host1.mydomain.com: Challenge response from server 
> cfmaster.mydomain.com/1.2.3.4 was incorrect!
> host1.mydomain.com: Authentication dialogue with cfmaster.mydomain.com failed
> host1.mydomain.com: Can't open file /var/cfengine/inputs/cfagent.conf
> host1.mydomain.com: (CFINPUTS is set to <nothing>)
> 
> host2.mydomain.com: BAD: Host authentication failed. Did you forget the 
> domain name?
> host2.mydomain.com: Authentication dialogue with cfmaster.mydomain.com failed
> host2.mydomain.com: Can't open file /var/cfengine/inputs/cfagent.conf
> host2.mydomain.com: (CFINPUTS is set to <nothing>)
> 
> host3.mydomain.com: Can't open file /var/cfengine/inputs/cfagent.conf
> host3.mydomain.com: (CFINPUTS is set to <nothing>)
> 
> These are the three biggest types of errors I am seeing at the moment.
> The class C's for all of these machines are listed in servd.conf in the
> TrustKeysFrom and AllowConnectionsFrom stanzas. There is no such file
> /var/cfengine/inputs/cfagent.conf on the client machines at the moment but
> there is an updates.conf. Would this cause the authentication to fail? I
> think the reason there is no cfagent.conf at the moment because we just
> don't have any rules to deploy for these machines yet.
> 
> Thanks for any tips anyone can provide!
> 



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Work: +47 22453272            Email:  Mark.Burgess@iu.hio.no
Fax : +47 22453205            WWW  :  http://www.iu.hio.no/~mark
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~