[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Cfengine daemons keep dying!!!

From: Chip Seraphine
Subject: Re: Cfengine daemons keep dying!!!
Date: Wed, 01 Dec 2004 11:13:43 -0600
User-agent: Mozilla Thunderbird 0.8 (X11/20040916)

Same thing here-- happens several times a day on one host or another. Call it a little less than 1% of the time, figuring for the runs/day and number of hosts.

I do see it happen much more often on some hosts than others, however, which is a bit odd. I don't know if it is the host itself or just when it happens to fire (splaytime is constant for a host if you don't change the upper limit, as it is hashed from hostname and/or IP or something).
I can never reproduce it when I run cfagent by hand.

Brian Thomas wrote:

For what it's worth, this is also a relatively common problem for me as
well, although for some reason this has faded significantly in the past
few weeks. I just had it happen this morning though, randomly, on a
couple of systems.

It also only appears to happen during copy, at random, and usually does
not happen twice in a row.


However. The challenge response problems your talking about we solve
following way:

rm /var/cfengine/ppkeys/root-* on the servers. They will copied on
first request back when trustkey is yes. Also we have limited the
to the cfengine ports only from the local machines via a firewall.

You have of course also delete the keys on the client side for some
cases. (In case the server key has changed) or you had one of that
cfengine versions running (see archives for details).
It's not a trust or re-key issue. The message:

cfengine:--------: Challenge response from server
was incorrect!
cfengine:--------: Authentication dialogue with cfengine failed

1. appears somewhat at random... but frequently ~2-3 times a day for a
given host.
2. obviously only appears during a copy operation
3. likely will not appear in the next run (about an hour later)

to mark,
Does it make sense that I'd get the message above if the server
fork a new child? I could just dig through the code, but thought I'd
to be lazy first.


Help-cfengine mailing list

Help-cfengine mailing list


Chip Seraphine
Unix Administrator
TradeLink, LLC

reply via email to

[Prev in Thread] Current Thread [Next in Thread]