Forum: CFEngine Help Subject: Re: How to setup Master /Client with CF3 Author: htru...@gmail.com Link to topic: https://cfengine.com/forum/read.php?3,22959,23021#msg-23021
Hello Jim & neilhwatson, after a day I am play around with it now I go back to cfengine v2. I setup client/server with cfv2 since getting better but I I have some problem (some error) but I don't know why and how to fix this. Here is my error on client and server and help me how to fix this. On server I run " cfservd -v -F" so that I can see the message on screen. So when I run "cfrun -v" on my client cfengine2 I got the message on the server side. dp-user@Nagios-dp:/usr/sbin$ New connection...(from 192.168.75.234/5) Spawning new thread... cfservd: Allowing 192.168.75.234 to connect without (re)checking ID Non-verified Host ID is ubuntu1104.corp.com (Using skipverify) Non-verified User ID seems to be root (Using skipverify) Loaded /var/lib/cfengine2/ppkeys/root-192.168.75.234.pub A public key was already known from ubuntu1104.corp.com/192.168.75.234 - no trust required Adding IP 192.168.75.234 to SkipVerify - no need to check this if we have a key The public key identity was confirmed as r...@ubuntu1104.corp.com cfservd: Strong authentication of client ubuntu1104.corp.com/192.168.75.234 achieved User root granted connection privileges cfservd: Host ubuntu1104.corp.com denied access to /usr/sbin/cfagent cfservd: From (host=ubuntu1104.corp.com,user=root,ip=192.168.75.234) cfservd: ID from connecting host: (EXEC ) On client side I have this message when I run "cfrun -vg" root@ubuntu1104:/var/lib/cfengine2/inputs# cfrun -vg Domain name = corp.com GNU Cfengine server daemon - 2.2.10 Free Software Foundation 1994- Donated by Mark Burgess, Oslo University College, Norway ------------------------------------------------------------------------ Host name is: ubuntu1104 Operating System Type is linux Operating System Release is 2.6.38-8-generic Architecture = x86_64 Using internal soft-class linux for host linux The time is now Thu Aug 4 13:13:21 2011 ------------------------------------------------------------------------ Additional hard class defined as: 64_bit Additional hard class defined as: linux_2_6_38_8_generic Additional hard class defined as: linux_x86_64 Additional hard class defined as: linux_x86_64_2_6_38_8_generic Additional hard class defined as: linux_x86_64_2_6_38_8_generic__42_Ubuntu_SMP_Mon_Apr_11_03_31_24_UTC_2011 GNU autoconf class from compile time: compiled_on_linux_gnu Address given by nameserver: 127.0.1.1 Checking integrity of the state database Checking integrity of the module directory Checking integrity of the input data for RPC Checking integrity of the output data for RPC Checking integrity of the PKI directory Making sure that locks are private... Loaded /var/lib/cfengine2/ppkeys/localhost.priv Loaded /var/lib/cfengine2/ppkeys/localhost.pub Looking for a source of entropy in /var/lib/cfengine2/randseed cfrun(0): .......... [ Hailing Nagios-dp.corp.com ] .......... Connecting to server Nagios-dp.corp.com to port 5308 with options Loaded /var/lib/cfengine2/ppkeys/root-192.168.75.237.pub Connect to Nagios-dp.corp.lab126.com = 192.168.75.237 on port 5308 Loaded /var/lib/cfengine2/ppkeys/root-192.168.75.237.pub ............................................................... cfrun:ubuntu1104.corp.com: Strong authentication of server=Nagios-dp.corp.com connection confirmed Nagios-dp.corp.com replies.. Unspecified server refusal (see verbose server output)cfrun:ubuntu1104.corp.com: Couldn't recv cfrun:ubuntu1104.corp.com: recv Connection with Nagios-dp.corp.com completed Thanks _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine
