Re: several questions on running cfengine

[Mark . Burgess]

You need AIX help -- can anyone out there help on this?
Possibly 2.0.5 might help here...what was the problem with pthreads?
Can someone else answer this too?

I know people are using this on AIX -- IBM for instance!! 

In the mean time,
you could try commenting out the HAVE_GETADDRINFO and see if that
helps.

M

On 12 Mar, Eva Hocks wrote:
> 
> 
> Mark, thanks for your sample output. Now I know what to look for. The
> config.log has ac_cv_func_getaddrinfo=yes
> but doesn't say anything what version. I am runing AIX 5.1. The
> getaddrinfo is IEEE POSIX 1003.1g (Protocol Independent Interfaces) DRAFT
> 6.3.
> 
> The conf.h in the src/ has
> /* Define if you have the `getaddrinfo' function. */
> #define HAVE_GETADDRINFO 1
> 
> 
> On AIX it's /etc/netsvc.conf. cfengine gets name resolution from the
> /etc/hosts file all right (changed the entries to verify). Where does
> cfservd know about IP?  cfagent does seem to use the interface as it did
> copy the ppkeys from the server and the client root-192.168.240.254.pub
> and root-192.168.240.11.pub
> cfagent logs:
> Interface 1: en0
> Sorry - there is no current standard way to find out my IPv6 address (!!)
> Maybe I have to tell cfengine to use IPv4? But where? I couldn't find it
> in the configure --help. I am still using 2.0.4 due to the pthread problem
> on AIX5.
> 
> Any ideas?
> Thanks,
> Eva
> 
> 
> On Wed, 12 Mar 2003 Mark.Burgess@iu.hio.no wrote:
> 
>>
>>
>> Eva - if this is all the output that comes out of cfservd -d2, even when you
>> connect to the host then there is something badly wrong. No connection is 
>> even
>> arriving at the machine. After what you have sent, you should see someting
>> like this: (my hosts are running IPv6 .. but imagine it says IPv4 there)
>>
>> Your server claims "address family 0" -- which I think is localhost. It
>> does not seem to know about IP at all!! Perhaps this is an AIX thing.
>> Something that needs to be configured? Note that it says below
>> "bound to address ::". On IPv4 it should say "bound to address 0 or 0.0.0.0".
>> You don't seem to get that far.
>>
>> Here is my guess: your system has the new getaddrinfo() calls (see what 
>> configure
>> tells you) and these have to be specially configured to read the right
>> results with whatever name service / directory service you are using.
>> For instance, on solaris, one has to alter nsswitch.conf to make this work.
>>
>> Any other AIX users have ideas??
>>
>> Mark
>>
>>
>> IPV6 address
>> sockaddr_ntop(::)
>> Bound to address :: on solaris=7
>> Listening for connections ...
>> Checking file updates on /local/iu/cfengine/inputs/cfservd.conf 
>> (3e574eef/3e6ee085)
>> IPV6 address
>> sockaddr_ntop(2001:700:700:3:a00:20ff:fe9b:dd4a)
>> Obtained IP address of 2001:700:700:3:a00:20ff:fe9b:dd4a on socket 6 from 
>> accept
>> FuzzyItemIn(2001:700:700:3:a00:20ff:fe9b:dd4a)
>> FuzzyItemIn(2001:700:700:3:a00:20ff:fe9b:dd4a)
>> Purging Old Connections...
>> Done purging
>> FuzzyItemIn(2001:700:700:3:a00:20ff:fe9b:dd4a)
>> Prepending 2001:700:700:3:a00:20ff:fe9b:dd4a
>> *** New socket [6]
>> New connection...(from 2001:700:700:3:a00:20ff:fe9b:dd4a/6)
>> Spawning new thread...
>> Checking file updates on /local/iu/cfengine/inputs/cfservd.conf 
>> (3e574eef/3e6ee085)
>> RecvSocketStream(8)
>>     (Concatenated 8 from stream)
>> Transaction Receive [t 62][]
>> RecvSocketStream(62)
>>     (Concatenated 62 from stream)
>> Received: [CAUTH 2001:700:700:3:a00:20ff:fe9b:dd4a nexus.iu.hio.no mark 0] 
>> on socket 6
>> Connecting host identifies itself as 2001:700:700:3:a00:20ff:fe9b:dd4a 
>> nexus.iu.hio.no mark 0
>> (ipstring=[2001:700:700:3:a00:20ff:fe9b:dd4a],fqname=[nexus.iu.hio.no],username=[mark],socket=[2001:700:700:3:a00:20ff:fe9b:dd4a])
>> FuzzyItemIn(2001:700:700:3:a00:20ff:fe9b:dd4a)
>> Socket caller address appears honest (2001:700:700:3:a00:20ff:fe9b:dd4a 
>> matches 2001:700:700:3:a00:20ff:fe9b:dd4a)
>> cfservd: Socket originates from 
>> 2001:700:700:3:a00:20ff:fe9b:dd4a=nexus.iu.hio.no
>> Attempting to verify honesty by looking up hostname (nexus.iu.hio.no)
>> Using v6 compatible lookup...
>> IPV6 address
>> sockaddr_ntop(2001:700:700:3:a00:20ff:fe9b:dd4a)
>> CMP: 2001:700:700:3:a00:20ff:fe9b:dd4a 2001:700:700:3:a00:20ff:fe9b:dd4a
>> IPV6 address
>> sockaddr_ntop(2001:700:700:3:a00:20ff:fe9b:dd4a)
>> Found match
>> IPV4 address
>> sockaddr_ntop(128.39.89.10)
>> CMP: 2001:700:700:3:a00:20ff:fe9b:dd4a 128.39.89.10
>> IPV4 address
>> sockaddr_ntop(128.39.89.10)
>> Host ID is nexus.iu.hio.no
>> User ID seems to be mark
>> RecvSocketStream(8)
>>     (Concatenated 8 from stream)
>> Transaction Receive [t 280][]
>> RecvSocketStream(280)
>>     (Concatenated 280 from stream)
>> Received: [SAUTH y 256 37] on socket 6
>> Challenge encryption = y, nonce = 37, buf = 256
>> ChecksumString(m)
>> RecvSocketStream(8)
>>     (Concatenated 8 from stream)
>> Transaction Receive [t 261][]
>> RecvSocketStream(261)
>>     (Concatenated 261 from stream)
>> RecvSocketStream(8)
>>     (Concatenated 8 from stream)
>> Transaction Receive [t 5][]
>> RecvSocketStream(5)
>>     (Concatenated 5 from stream)
>> Modulus (2048 bit):
>>     00:c1:b4:1b:46:b0:da:e4:13:81:b8:27:6b:e5:dc:
>>     e1:a8:a6:cc:e3:d3:43:aa:5c:95:71:04:37:8a:61:
>>     5c:05:90:73:d0:4c:2a:ca:c1:29:36:17:27:9a:f4:
>>     70:45:87:a2:30:ec:93:6c:83:34:6f:e2:f5:ce:09:
>>     d8:45:67:68:2b:63:a7:3f:90:96:a0:42:84:a0:b6:
>>     34:6f:0c:80:c9:86:07:87:aa:b3:98:59:ee:51:c4:
>>     60:74:46:9f:a1:46:58:02:49:77:b1:20:c8:ef:37:
>>     11:b1:95:a7:9a:28:93:a5:ed:b5:d6:84:21:ef:7d:
>>     fa:89:cc:6b:35:24:a5:e6:50:ac:81:ae:7e:74:49:
>>     5b:2b:92:4a:67:10:fa:71:da:61:92:65:48:18:55:
>>     af:c7:98:fe:b9:ac:e4:aa:56:b8:fa:a5:e1:10:26:
>>     be:10:f7:5f:1e:64:7b:26:96:0e:3d:48:07:90:4b:
>>     d1:e3:c9:ee:7c:c3:84:df:6a:50:ca:f9:ad:40:fe:
>>     b9:96:44:91:38:fe:4e:5f:84:cc:c1:bf:de:db:85:
>>     9c:94:dd:c7:6b:13:00:8b:8b:80:9d:4a:4b:f9:87:
>>     b4:1a:fd:b2:a0:c5:8c:61:33:f7:b4:17:fe:72:b6:
>>     7c:e9:b3:24:da:16:fa:2b:2e:20:89:19:e1:c5:60:
>>     df:37
>> Exponent: 35 (0x23)
>> Havekey(mark-2001:700:700:3:a00:20ff:fe9b:dd4a)
>> Did not have key mark-2001:700:700:3:a00:20ff:fe9b:dd4a
>> No previous key found, and unable to accept this one on trust
>> Transaction Send[t 39][Packed text]
>> SendSocketStream, sent 47
>> cfservd: Host authorization/authentication failed or access denied
>> Transaction Send[t 64][Packed text]
>> SendSocketStream, sent 72
>> cfservd: From 
>> (host=nexus.iu.hio.no,user=mark,ip=2001:700:700:3:a00:20ff:fe9b:dd4a)
>> Terminating thread...
>> ***Closing socket 6 from 2001:700:700:3:a00:20ff:fe9b:dd4a
>> Deleted item 2001:700:700:3:a00:20ff:fe9b:dd4a
>> ^Ccfservd: Received signal 2 (SIGINT) while doing [cfservd]
>> cfservd: Logical start time Wed Mar 12 08:23:49 2003
>> cfservd: This sub-task started really at Wed Mar 12 08:23:49 2003
>>
>>
>> On 11 Mar, Eva Hocks wrote:
>> >
>> >
>> > On Tue, 11 Mar 2003 Mark.Burgess@iu.hio.no wrote:
>> >
>> >>
>> >> I have to sleep now, but if you send the -d2 output from cfservd I promise
>> >> to look at it tomorrow.
>> >>
>> >> Mark
>> >>
>> >
>> >
>> > Mark,
>> >
>> > thanks you very much for your patience. I really appriciate the help of
>> > all of you. Appended the output from the cfservd. I couldn't see anything
>> > wrong but then I don't know what it should look like.
>> >
>> > Thnaks again,
>> > Eva
>>
>>
>>
>> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>> Work: +47 22453272            Email:  Mark.Burgess@iu.hio.no
>> Fax : +47 22453205            WWW  :  http://www.iu.hio.no/~mark
>> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>>
>>
> 
> 
> 
> 
> 
> _______________________________________________
> Help-cfengine mailing list
> Help-cfengine@gnu.org
> http://mail.gnu.org/mailman/listinfo/help-cfengine



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Work: +47 22453272            Email:  Mark.Burgess@iu.hio.no
Fax : +47 22453205            WWW  :  http://www.iu.hio.no/~mark
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~