Has anyone else experienced sporadic, random, ongoing authentication failures related to cf-serverd seemingly misidentifying a client as not belonging to an authorized network? The frequency of these failures, based on estimated successful execution, is extremely low. ~.01% or so. The client emails me the following:

   Challenge response from server somehost.broadinstitute.org/x.x.x.x was 
incorrect!
   I: Made in version 'not specified' of '/var/cfengine/inputs/update.cf' near 
line 13
     !! Authentication dialogue with somehost.broadinstitute.org failed


The "near line 13" in update.cf is usually the content of the message however I've seen other bundles flagged instead.

cf-serverd logs at the same time:

   Feb 23 10:17:13 hostname community>[24161]:  Not allowing connection
   from non-authorized IP x.x.x.x


I can immediately log into the client and run cf-agent without a problem. The client will go weeks or even months without having another authentication failure which makes debugging a little difficult.

The client is running cfengine community 3.1.2 and cf-serverd is running the latest svn. I've had this problem ever since I started using cf3, however.

Cheers,
Frans
_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to