cfrun and cfservd

[Mohamed Eldesoky]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all,

I have just got cfengine working with me.
The only trouble is with cfrun.

keys are exchanged properly (and cfagent works fine), and cfservd is running.
Only it doesn't allow access.
It always shows the famous 
"Host authentication failed. Did you forget the domain name or IP/DNS address 
registration (for ipv4 or ipv6)"   to the server

and this strange error on the client 
"Received: [EXEC root ] on socket 5
User root is not allowed on this server
cfservd: Host authorization/authentication failed or access denied
Transaction Send[t 114][Packed text]
Attempting to send 122 bytes
SendSocketStream, sent 122
"


I will post my conf files for cfservd.conf and cfrun.conf

cfservd.conf:
############### On both server and client ################
control:

        domain = ( domain.com )
        cfrunCommand = ( "/usr/local/sbin/cfagent" )
        Access = ( root )
        AllowConnectionsFrom = ( xxx.xxx.xxx.xxx )  ## An IP range
        TrustKeysFrom = ( xxx.xxx.xxx.xxx )  ## An IP range
        AllowUser = ( root )
        SkipVerify = ( xxx.xxx.xxx.xxx )  ## this is an IP range
grant:

        # Grant access to all hosts at example.org.
        # Files should be world readable

        /var/cfengine/inputs/       *
        /usr/local/sbin/           *
        /opt/                      *

cfrun.hosts:

domain=domain.com
access=root
xxx.xxx.xxx.xxx root
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFApzeF2FHsOWMJBKMRAk5lAKCHanYZfjdB30BPoeiigFKpTyJw4QCfUkA+
L9+zh4p0v1F61FFChxuELfc=
=j/2z
-----END PGP SIGNATURE-----