Having a problem with editfiles

[Shoemaker, Paul A.]

Hello!

I am running cfengine 2.0.7p3 on a SUN sparc server running Solaris 9.
The cfengine binaries were compiled under Solaris 6.

I am doing the following to standardize some passwords and yet no matter
what I try I get nothing in the log produced by cfagent to indicate that
/etc/shadow has been edited and yet I know it has been.

control:
        Inform = ( on )
        CPW_usera = ( ExecResult(/var/cfengine2/modules/curpw usera) )
        SPW_usera = ( 1yXp30abcd )

groups:
        pwunchanged_usera = ( Strcmp("${CPW_usera}","${SPW_usera}") )

editfiles:
        sparc::
                { /etc/shadow
                        Inform "true"
                        BeginGroupIfNotDefined "pwunchanged_usera"
                        ReplaceAll "^usera:${CPW_usera}:[0-9]*:" With
"usera:${SPW_usera}:12345:"
                        EndGroup
                }

Yet even when I know that the current password encryption in /etc/shadow
doesn't match the encryption for the standard password and that cfengine
should (and does) edit /etc/shadow, I never get informed that the edit
did indeed take place.  And since I rely on those notifications to tell
me if the standard password has been distributed, not getting any
notification is a pain.  I don't want to run cfagent in verbose mode if
I can avoid it.

Has anyone else run into this problem where editfiles doesn't tell you
the file has been edited even though the edit does take place?  Have I
missed something somewhere?

Help!  And thanks in advance!

Paul A. Shoemaker
Senior UNIX Systems Administrator