Re: several questions on running cfengine

[Mark . Burgess]

Eva - if this is all the output that comes out of cfservd -d2, even when you
connect to the host then there is something badly wrong. No connection is even
arriving at the machine. After what you have sent, you should see someting
like this: (my hosts are running IPv6 .. but imagine it says IPv4 there)

Your server claims "address family 0" -- which I think is localhost. It
does not seem to know about IP at all!! Perhaps this is an AIX thing.
Something that needs to be configured? Note that it says below
"bound to address ::". On IPv4 it should say "bound to address 0 or 0.0.0.0".
You don't seem to get that far.

Here is my guess: your system has the new getaddrinfo() calls (see what 
configure
tells you) and these have to be specially configured to read the right
results with whatever name service / directory service you are using.
For instance, on solaris, one has to alter nsswitch.conf to make this work.

Any other AIX users have ideas??

Mark


IPV6 address
sockaddr_ntop(::)
Bound to address :: on solaris=7
Listening for connections ...
Checking file updates on /local/iu/cfengine/inputs/cfservd.conf 
(3e574eef/3e6ee085)
IPV6 address
sockaddr_ntop(2001:700:700:3:a00:20ff:fe9b:dd4a)
Obtained IP address of 2001:700:700:3:a00:20ff:fe9b:dd4a on socket 6 from accept
FuzzyItemIn(2001:700:700:3:a00:20ff:fe9b:dd4a)
FuzzyItemIn(2001:700:700:3:a00:20ff:fe9b:dd4a)
Purging Old Connections...
Done purging
FuzzyItemIn(2001:700:700:3:a00:20ff:fe9b:dd4a)
Prepending 2001:700:700:3:a00:20ff:fe9b:dd4a
*** New socket [6]
New connection...(from 2001:700:700:3:a00:20ff:fe9b:dd4a/6)
Spawning new thread...
Checking file updates on /local/iu/cfengine/inputs/cfservd.conf 
(3e574eef/3e6ee085)
RecvSocketStream(8)
    (Concatenated 8 from stream)
Transaction Receive [t 62][]
RecvSocketStream(62)
    (Concatenated 62 from stream)
Received: [CAUTH 2001:700:700:3:a00:20ff:fe9b:dd4a nexus.iu.hio.no mark 0] on 
socket 6
Connecting host identifies itself as 2001:700:700:3:a00:20ff:fe9b:dd4a 
nexus.iu.hio.no mark 0
(ipstring=[2001:700:700:3:a00:20ff:fe9b:dd4a],fqname=[nexus.iu.hio.no],username=[mark],socket=[2001:700:700:3:a00:20ff:fe9b:dd4a])
FuzzyItemIn(2001:700:700:3:a00:20ff:fe9b:dd4a)
Socket caller address appears honest (2001:700:700:3:a00:20ff:fe9b:dd4a matches 
2001:700:700:3:a00:20ff:fe9b:dd4a)
cfservd: Socket originates from 
2001:700:700:3:a00:20ff:fe9b:dd4a=nexus.iu.hio.no
Attempting to verify honesty by looking up hostname (nexus.iu.hio.no)
Using v6 compatible lookup...
IPV6 address
sockaddr_ntop(2001:700:700:3:a00:20ff:fe9b:dd4a)
CMP: 2001:700:700:3:a00:20ff:fe9b:dd4a 2001:700:700:3:a00:20ff:fe9b:dd4a
IPV6 address
sockaddr_ntop(2001:700:700:3:a00:20ff:fe9b:dd4a)
Found match
IPV4 address
sockaddr_ntop(128.39.89.10)
CMP: 2001:700:700:3:a00:20ff:fe9b:dd4a 128.39.89.10
IPV4 address
sockaddr_ntop(128.39.89.10)
Host ID is nexus.iu.hio.no
User ID seems to be mark
RecvSocketStream(8)
    (Concatenated 8 from stream)
Transaction Receive [t 280][]
RecvSocketStream(280)
    (Concatenated 280 from stream)
Received: [SAUTH y 256 37] on socket 6
Challenge encryption = y, nonce = 37, buf = 256
ChecksumString(m)
RecvSocketStream(8)
    (Concatenated 8 from stream)
Transaction Receive [t 261][]
RecvSocketStream(261)
    (Concatenated 261 from stream)
RecvSocketStream(8)
    (Concatenated 8 from stream)
Transaction Receive [t 5][]
RecvSocketStream(5)
    (Concatenated 5 from stream)
Modulus (2048 bit):
    00:c1:b4:1b:46:b0:da:e4:13:81:b8:27:6b:e5:dc:
    e1:a8:a6:cc:e3:d3:43:aa:5c:95:71:04:37:8a:61:
    5c:05:90:73:d0:4c:2a:ca:c1:29:36:17:27:9a:f4:
    70:45:87:a2:30:ec:93:6c:83:34:6f:e2:f5:ce:09:
    d8:45:67:68:2b:63:a7:3f:90:96:a0:42:84:a0:b6:
    34:6f:0c:80:c9:86:07:87:aa:b3:98:59:ee:51:c4:
    60:74:46:9f:a1:46:58:02:49:77:b1:20:c8:ef:37:
    11:b1:95:a7:9a:28:93:a5:ed:b5:d6:84:21:ef:7d:
    fa:89:cc:6b:35:24:a5:e6:50:ac:81:ae:7e:74:49:
    5b:2b:92:4a:67:10:fa:71:da:61:92:65:48:18:55:
    af:c7:98:fe:b9:ac:e4:aa:56:b8:fa:a5:e1:10:26:
    be:10:f7:5f:1e:64:7b:26:96:0e:3d:48:07:90:4b:
    d1:e3:c9:ee:7c:c3:84:df:6a:50:ca:f9:ad:40:fe:
    b9:96:44:91:38:fe:4e:5f:84:cc:c1:bf:de:db:85:
    9c:94:dd:c7:6b:13:00:8b:8b:80:9d:4a:4b:f9:87:
    b4:1a:fd:b2:a0:c5:8c:61:33:f7:b4:17:fe:72:b6:
    7c:e9:b3:24:da:16:fa:2b:2e:20:89:19:e1:c5:60:
    df:37
Exponent: 35 (0x23)
Havekey(mark-2001:700:700:3:a00:20ff:fe9b:dd4a)
Did not have key mark-2001:700:700:3:a00:20ff:fe9b:dd4a
No previous key found, and unable to accept this one on trust
Transaction Send[t 39][Packed text]
SendSocketStream, sent 47
cfservd: Host authorization/authentication failed or access denied
Transaction Send[t 64][Packed text]
SendSocketStream, sent 72
cfservd: From 
(host=nexus.iu.hio.no,user=mark,ip=2001:700:700:3:a00:20ff:fe9b:dd4a)
Terminating thread...
***Closing socket 6 from 2001:700:700:3:a00:20ff:fe9b:dd4a
Deleted item 2001:700:700:3:a00:20ff:fe9b:dd4a
^Ccfservd: Received signal 2 (SIGINT) while doing [cfservd]
cfservd: Logical start time Wed Mar 12 08:23:49 2003
cfservd: This sub-task started really at Wed Mar 12 08:23:49 2003


On 11 Mar, Eva Hocks wrote:
> 
> 
> On Tue, 11 Mar 2003 Mark.Burgess@iu.hio.no wrote:
> 
>>
>> I have to sleep now, but if you send the -d2 output from cfservd I promise
>> to look at it tomorrow.
>>
>> Mark
>>
> 
> 
> Mark,
> 
> thanks you very much for your patience. I really appriciate the help of
> all of you. Appended the output from the cfservd. I couldn't see anything
> wrong but then I don't know what it should look like.
> 
> Thnaks again,
> Eva



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Work: +47 22453272            Email:  Mark.Burgess@iu.hio.no
Fax : +47 22453205            WWW  :  http://www.iu.hio.no/~mark
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~