Re: cfrun and cfservd

[Mark . Burgess]

I would try AllowMultipleConnectionsFrom since you will be connecting
with several streams. 

M

On 16 May, Mohamed Eldesoky wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hi all,
> 
> I have just got cfengine working with me.
> The only trouble is with cfrun.
> 
> keys are exchanged properly (and cfagent works fine), and cfservd is running.
> Only it doesn't allow access.
> It always shows the famous 
> "Host authentication failed. Did you forget the domain name or IP/DNS address 
> registration (for ipv4 or ipv6)"   to the server
> 
> and this strange error on the client 
> "Received: [EXEC root ] on socket 5
> User root is not allowed on this server
> cfservd: Host authorization/authentication failed or access denied
> Transaction Send[t 114][Packed text]
> Attempting to send 122 bytes
> SendSocketStream, sent 122
> "
> 
> 
> I will post my conf files for cfservd.conf and cfrun.conf
> 
> cfservd.conf:
> ############### On both server and client ################
> control:
> 
>         domain = ( domain.com )
>         cfrunCommand = ( "/usr/local/sbin/cfagent" )
>         Access = ( root )
>         AllowConnectionsFrom = ( xxx.xxx.xxx.xxx )  ## An IP range
>         TrustKeysFrom = ( xxx.xxx.xxx.xxx )  ## An IP range
>         AllowUser = ( root )
>         SkipVerify = ( xxx.xxx.xxx.xxx )  ## this is an IP range
> grant:
> 
>         # Grant access to all hosts at example.org.
>         # Files should be world readable
> 
>         /var/cfengine/inputs/       *
>         /usr/local/sbin/           *
>         /opt/                      *
> 
> cfrun.hosts:
> 
> domain=domain.com
> access=root
> xxx.xxx.xxx.xxx root
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.3 (GNU/Linux)
> 
> iD8DBQFApzeF2FHsOWMJBKMRAk5lAKCHanYZfjdB30BPoeiigFKpTyJw4QCfUkA+
> L9+zh4p0v1F61FFChxuELfc=
> =j/2z
> -----END PGP SIGNATURE-----
> 
> 
> _______________________________________________
> Help-cfengine mailing list
> Help-cfengine@gnu.org
> http://mail.gnu.org/mailman/listinfo/help-cfengine



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Work: +47 22453272            Email:  Mark.Burgess@iu.hio.no
Fax : +47 22453205            WWW  :  http://www.iu.hio.no/~mark
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~