Forum: Cfengine Help
Subject: How to setup protected server as its own policyhost?
Author: sdodier
Link to topic: https://cfengine.com/forum/read.php?3,21883,21883#msg-21883

Hello,

I have an out of the ordinary request, and I wanted to see if anyone else is 
doing a similar setup.  I have a server that is locked down due to its 
functionality as a log server.  It currently has cfengine2 running on it.  I 
have upgraded the rest of our environment to cfengine3, and am now working on 
the log server.  I have basically made the log server a standalone cfengine 
installation.  It serves as its own policyhost with its own mastercfengine 
repository.  When trying to run cfengine on it, it tells me it can't connect to 
the 5308 port on the local server.  This is because I don't have cf-serverd 
running and don't want to open any additional ports on the log server.  My 
current installation of the cfengine2 is set up the same way, in that it does 
not have cfservd running with an associated port.  Yet, cfengine2 knows that 
the policyhost is itself, and will just use the local directory structure to 
get what it needs.  Is there any way to tell cfengine3 not to use a port 
 and to just connect to the localhost directories for what it needs?

Thanks in advance,
Steve

_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to