Re: cfrun and cfservd

[Mohamed Eldesoky]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I am using cfengine-2.1.5

On Sunday 16 May 2004 12:42 pm, Mohamed Eldesoky wrote:
> Hi all,
>
> I have just got cfengine working with me.
> The only trouble is with cfrun.
>
> keys are exchanged properly (and cfagent works fine), and cfservd is
> running. Only it doesn't allow access.
> It always shows the famous
> "Host authentication failed. Did you forget the domain name or IP/DNS
> address registration (for ipv4 or ipv6)"   to the server
>
> and this strange error on the client
> "Received: [EXEC root ] on socket 5
> User root is not allowed on this server
> cfservd: Host authorization/authentication failed or access denied
> Transaction Send[t 114][Packed text]
> Attempting to send 122 bytes
> SendSocketStream, sent 122
> "
>
>
> I will post my conf files for cfservd.conf and cfrun.conf
>
> cfservd.conf:
> ############### On both server and client ################
> control:
>
>         domain = ( domain.com )
>         cfrunCommand = ( "/usr/local/sbin/cfagent" )
>         Access = ( root )
>         AllowConnectionsFrom = ( xxx.xxx.xxx.xxx )  ## An IP range
>         TrustKeysFrom = ( xxx.xxx.xxx.xxx )  ## An IP range
>         AllowUser = ( root )
>         SkipVerify = ( xxx.xxx.xxx.xxx )  ## this is an IP range
> grant:
>
>         # Grant access to all hosts at example.org.
>         # Files should be world readable
>
>         /var/cfengine/inputs/       *
>         /usr/local/sbin/           *
>         /opt/                      *
>
> cfrun.hosts:
>
> domain=domain.com
> access=root
> xxx.xxx.xxx.xxx root
>
>
> _______________________________________________
> Help-cfengine mailing list
> Help-cfengine@gnu.org
> http://mail.gnu.org/mailman/listinfo/help-cfengine
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFApzoD2FHsOWMJBKMRAiDbAKCIVZW8JTFrKmvWNNL1YHXCMPZzoQCgvqfz
C8FDaRZp4BINB36b3eJ3XPE=
=N0oM
-----END PGP SIGNATURE-----