Re: cfrun and cfservd

[Mohamed Eldesoky]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I am only testing now with one to  one connections.
ie, one server from one client

Regards

On Sunday 16 May 2004 1:46 pm, Mark.Burgess@iu.hio.no wrote:
> I would try AllowMultipleConnectionsFrom since you will be connecting
> with several streams.
>
> M
>
> On 16 May, Mohamed Eldesoky wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > Hi all,
> >
> > I have just got cfengine working with me.
> > The only trouble is with cfrun.
> >
> > keys are exchanged properly (and cfagent works fine), and cfservd is
> > running. Only it doesn't allow access.
> > It always shows the famous
> > "Host authentication failed. Did you forget the domain name or IP/DNS
> > address registration (for ipv4 or ipv6)"   to the server
> >
> > and this strange error on the client
> > "Received: [EXEC root ] on socket 5
> > User root is not allowed on this server
> > cfservd: Host authorization/authentication failed or access denied
> > Transaction Send[t 114][Packed text]
> > Attempting to send 122 bytes
> > SendSocketStream, sent 122
> > "
> >
> >
> > I will post my conf files for cfservd.conf and cfrun.conf
> >
> > cfservd.conf:
> > ############### On both server and client ################
> > control:
> >
> >         domain = ( domain.com )
> >         cfrunCommand = ( "/usr/local/sbin/cfagent" )
> >         Access = ( root )
> >         AllowConnectionsFrom = ( xxx.xxx.xxx.xxx )  ## An IP range
> >         TrustKeysFrom = ( xxx.xxx.xxx.xxx )  ## An IP range
> >         AllowUser = ( root )
> >         SkipVerify = ( xxx.xxx.xxx.xxx )  ## this is an IP range
> > grant:
> >
> >         # Grant access to all hosts at example.org.
> >         # Files should be world readable
> >
> >         /var/cfengine/inputs/       *
> >         /usr/local/sbin/           *
> >         /opt/                      *
> >
> > cfrun.hosts:
> >
> > domain=domain.com
> > access=root
> > xxx.xxx.xxx.xxx root
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.2.3 (GNU/Linux)
> >
> > iD8DBQFApzeF2FHsOWMJBKMRAk5lAKCHanYZfjdB30BPoeiigFKpTyJw4QCfUkA+
> > L9+zh4p0v1F61FFChxuELfc=
> > =j/2z
> > -----END PGP SIGNATURE-----
> >
> >
> > _______________________________________________
> > Help-cfengine mailing list
> > Help-cfengine@gnu.org
> > http://mail.gnu.org/mailman/listinfo/help-cfengine
>
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Work: +47 22453272            Email:  Mark.Burgess@iu.hio.no
> Fax : +47 22453205            WWW  :  http://www.iu.hio.no/~mark
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFAp0qN2FHsOWMJBKMRAiZvAKDxfBYcDY4qqH5WEYAHsfmQnmnO+QCfWoCf
spP7Geyd8P8rYEaJb6q3n94=
=dFG3
-----END PGP SIGNATURE-----