File copy weirdness

[PAUL WILLIAMSON]

Sorry for the sudden tons of questions...I 
appreciate all the help though.

I have a stanza in my update.conf:

$(master_cfinput)       dest=$(workdir)/inputs
                                r=inf
                                mode=700
                                type=binary
                                exclude=*.lst
                                exclude=*~
                                exclude=#*
                                server=$(policyhost)
                                trustkey=true

which copied all files fine.  I had more than cfengine 
related files (known_hosts, sshd_config, etc.) that I 
was cpoying, then in cfagent.conf I was copying from 
that location to the correct location on each server.

Now that I've moved the files to a separate directory 
and created a copy stanza in cfagent.conf, I keep 
getting "Can't stat" messages.  All servers have the 
TIMEZONE set correctly (via cfengine) and all servers 
are running ntp.  The specific message I'm getting:

Checking copy from
<policyhost>:/var/cfengine/masterfiles/specialfiles/known_hosts to
/.ssh/known_hosts
cfengine:<agentmachine>: Server returned error:  Host authentication
failed. Did you forget the domain name or IP/DNS address registration
(for ipv4 or ipv6)?
cfengine:<agentmachine>: Can't stat
/var/cfengine/masterfiles/specialfiles/known_hosts in copy

I have exchanged public keys, named the policyhost 
key root-x.x.x.x.pub on the agentmachine, named the 
agent machine key root-y.y.y.y.pub on the policyhost 
machine.

x.x.x.x = policy host ip address
y.y.y.y = agent machine ip address

Copying via update.conf works, copying 
via cfagent.conf does not.

Paul