Forum: CFEngine Help Subject: cfexecd fails with scripts or commands must have absolute path names Author: julian924s Link to topic: https://cfengine.com/forum/read.php?3,25465,25465#msg-25465
Hi - first post and a relative newbie to cfengine. I've inherited an existing cfengine 2 install and am having some problems setting up a new client. Our policy server runs version cfengine-2.1.15 and I'm still coming to terms with how this is even setup and works tbh ... for existing clients it appears to work perfectly well. As for my new client this is running cfengine-2.2.10, I've copied the update.conf from the policyhost and ran the following command: cfagent -DINSTALL -vq 2>&1 | tee /var/tmp/cfagent.log The contents of cfagent.log is: Reference time set to Mon Apr 2 14:56:24 2012 GNU Configuration Engine - 2.2.10 Free Software Foundation 1994- Donated by Mark Burgess, Oslo University College, Norway ------------------------------------------------------------------------ Host name is: tdukwbbuild Operating System Type is sunos Operating System Release is 5.10 Architecture = sun4u Using internal soft-class solaris for host solaris The time is now Mon Apr 2 14:56:24 2012 ------------------------------------------------------------------------ Additional hard class defined as: 32_bit Additional hard class defined as: sunos_5_10 Additional hard class defined as: sunos_sun4u Additional hard class defined as: sunos_sun4u_5_10 Additional hard class defined as: sparc Additional hard class defined as: SUNW,Sun-Fire-V210 Additional hard class defined as: sunos_sun4u_5_10_Generic_147440_02 GNU autoconf class from compile time: compiled_on_solaris2_9 Address given by nameserver: xx.14.80.199 Interface 1: lo0 Interface 2: bge0 Trying to locate my IPv6 address Looking for environment from cfenvd... Unable to detect environment from cfenvd cfengine:tdukwbbuild: No preconfiguration file $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ * (Changing context state to: update) * $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ Looking for an input file /var/cfengine/inputs/update.conf Cfengine input file had no explicit version string Finished with update.conf --------------------------------------------------------------------- Looking for remote method collaborations --------------------------------------------------------------------- Finished with RPC Accepted domain name: something.co.uk LogDirectory = /var/cfengine Loaded /var/cfengine/ppkeys/localhost.priv Loaded /var/cfengine/ppkeys/localhost.pub Checksum database is /var/cfengine/checksum_digests.db Default binary server seems to be tdukwbbuild ********************************************************************* Update Sched: copy pass 1 @ Mon Apr 2 14:56:24 2012 ********************************************************************* Checking copy from policyhost:/opt/home/admin/cfengine/inputs to /var/cfengine/inputs Connect to policyhost = xx.14.46.63 on port 5308 Loaded /var/cfengine/ppkeys/root-xx.14.46.63.pub ............................................................... cfengine:tdukwbbuild: Strong authentication of server=policyhost connection confirmed Opening /opt/home/admin/cfengine/inputs/CVS->/var/cfengine/inputs/CVS Opening /opt/home/admin/cfengine/inputs/tools->/var/cfengine/inputs/tools Opening /opt/home/admin/cfengine/inputs/tools/CVS->/var/cfengine/inputs/tools/CVS Performance(Copy(policyhost:/opt/home/admin/cfengine/inputs > /var/cfengine/inputs)): time=12.0806 secs, av=12.0368 +/- 2.0204 Checking copy from policyhost:/opt/home/admin/cfengine/modules to /var/cfengine/modules cfengine:tdukwbbuild: (Destination purging enabled) Opening /opt/home/admin/cfengine/modules/CVS->/var/cfengine/modules/CVS Performance(Copy(policyhost:/opt/home/admin/cfengine/modules > /var/cfengine/modules)): time=0.7900 secs, av=0.8493 +/- 0.1298 Checking copy from localhost:/opt/tools/sbin/cfagent to /var/cfengine/bin/cfagent Performance(Copy(localhost:/opt/tools/sbin/cfagent > /var/cfengine/bin/cfagent)): time=0.1373 secs, av=0.1602 +/- 0.0663 Checking copy from localhost:/opt/tools/sbin/cfservd to /var/cfengine/bin/cfservd Performance(Copy(localhost:/opt/tools/sbin/cfservd > /var/cfengine/bin/cfservd)): time=0.1247 secs, av=0.1477 +/- 0.0593 Checking copy from localhost:/opt/tools/sbin/cfexecd to /var/cfengine/bin/cfexecd Performance(Copy(localhost:/opt/tools/sbin/cfexecd > /var/cfengine/bin/cfexecd)): time=0.1244 secs, av=0.1404 +/- 0.0520 Saving the setuid log in /var/cfengine/cfagent.tdukwbbuild.log ********************************************************************* Update Sched: tidy pass 1 @ Mon Apr 2 14:56:37 2012 ********************************************************************* --------------------------------------------------------------------- Tidying Spool Directories --------------------------------------------------------------------- --------------------------------------------------------------------- Tidying by directory --------------------------------------------------------------------- No home patterns to search --------------------------------------------------------------------- Alerts --------------------------------------------------------------------- Purging private classes from context update - Deleting tdwh_co_uk - Deleting co_uk - Deleting uk $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ * (Changing context state to: main) * $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ --------------------------------------------------------------------- Loading persistent classes --------------------------------------------------------------------- --------------------------------------------------------------------- Loaded persistent memory --------------------------------------------cf:cfengine:tdukwbbuild:/var/cfengine/inputs/cf.main:13: scripts or commands must have absolute path names cf:cfengine:tdukwbbuild:/var/cfengine/inputs/cf.main:13: scripts or commands must have absolute path names cf:cfengine:tdukwbbuild:/var/cfengine/inputs/cf.main:13: scripts or commands must have absolute path names cf:cfengine:tdukwbbuild:/var/cfengine/inputs/cf.main:13: scripts or commands must have absolute path names cf:cfengine:tdukwbbuild:/var/cfengine/inputs/cf.ssh:12: scripts or commands must have absolute path names cf:cfengine:tdukwbbuild:/var/cfengine/inputs/cf.ssh:12: scripts or commands must have absolute path names ------------------------- Looking for environment from cfenvd... Unable to detect environment from cfenvd Looking for an input file /var/cfengine/inputs/cfagent.conf Cfengine input file had no explicit version string Looking for an input file cf.local Cfengine input file had no explicit version string Looking for an input file cf.groups Cfengine input file had no explicit version string Looking for an input file cf.variables Cfengine input file had no explicit version string Looking for an input file cf.install Cfengine input file had no explicit version string Looking for an input file cf.main cfengine:tdukwbbuild: Warning: varstring "/usr/sbin/svccfg -s rpc/bind setprop config/enable_tcpwrappers=boolean: true" contains the list iterator ':' - you should escape these close to non-separator characters so they don't get lost! (e.g. /bin/echo\: ) cfengine: concerns: true cfengine:tdukwbbuild: Warning: varstring "/usr/sbin/svccfg -s rpc/bind setprop config/local_only=boolean: true" contains the list iterator ':' - you should escape these close to non-separator characters so they don't get lost! (e.g. /bin/echo\: ) cfengine: concerns: true cfengine:tdukwbbuild: Warning: varstring "/usr/sbin/svcadm refresh svc:/network/smtp:sendmail" contains the list iterator ':' - you should escape these close to non-separator characters so they don't get lost! (e.g. /bin/echo\: ) cfengine: concerns: sendmail cfengine:tdukwbbuild: Warning: varstring "/usr/sbin/svcadm refresh svc:/system/system-log:default" contains the list iterator ':' - you should escape these close to non-separator characters so they don't get lost! (e.g. /bin/echo\: ) cfengine: concerns: default Cfengine input file had no explicit version string Looking for an input file cf.hosts Cfengine input file had no explicit version string Looking for an input file cf.hosts_allow Cfengine input file had no explicit version string Looking for an input file cf.site Cfengine input file had no explicit version string Looking for an input file cf.filters Cfengine input file had no explicit version string Looking for an input file cf.temporary Cfengine input file had no explicit version string Looking for an input file cf.anomaly Cfengine input file had no explicit version string Looking for an input file cf.smf Cfengine input file had no explicit version string Looking for an input file cf.ssh cfengine:tdukwbbuild: Warning: varstring "/usr/sbin/svcadm refresh svc:/network/ssh:default" contains the list iterator ':' - you should escape these close to non-separator characters so they don't get lost! (e.g. /bin/echo\: ) cfengine: concerns: default cfengine:tdukwbbuild: Warning: varstring "/usr/sbin/svcadm restart svc:/network/ssh:default" contains the list iterator ':' - you should escape these close to non-separator characters so they don't get lost! (e.g. /bin/echo\: ) cfengine: concerns: default Cfengine input file had no explicit version string Looking for an input file cf.db2 Cfengine input file had no explicit version string Looking for an input file cf.jts Cfengine input file had no explicit version string Looking for an input file cf.websphere Cfengine input file had no explicit version string Looking for an input file cf.depot Cfengine input file had no explicit version string Finished with cfagent.conf Defined Classes = ( 32_bit 49_14_80 49_14_80_199 ALOM April Daily Day2 ExportHome GMT_Hr13 GlobalZone HostsAllow Hr14 Hr14_Q4 INSTALL IntNets Min55_00 Min56 Monday NFSServers Q4 RootHomeSet RootUserDir SFWdir SMA SMF SUNW_Sun_Fire_V210 Setup_SSH_OK SunFtpd SunSSH TFTPServers TempDummy UATHosts Update Yr2012 any cfengine_2 cfengine_2_2 cfengine_2_2_10 co_uk compiled_on_solaris2_9 deploytdw ipv4_49 ipv4_49_14 ipv4_49_14_80 ipv4_49_14_80_199 loghost net_iface_bge0 net_iface_lo0 rootcron solaris sparc sun4u sunos_5_10 sunos_sun4u sunos_sun4u_5_10 sunos_sun4u_5_10_Generic_147440_02 tdukwbbuild tdukwbbuild_tdwh_co_uk tdwh_co_uk uk ) Negated Classes = ( ) Installable classes = ( no_default_route WAS51Inst WAS6Inst WAS7Inst WASNDServer OptHome ExportHome diskfull syslogconf crontab rootcron ntpconf inetdconf cfbinupd mailaliases mailuserdb nscdhosts snmpdconf SMF SMA nscdkill RootUserDir sendmail contents Rhosts_Exists Authlog RootHomeSet rpcconf syslogkill hosts apacheconf jhcmail jhcsms snmpdkill Apache1 Apache2 Admin_User sudoers sshdconf sshdkill SunSSH OpenSSH Setup_SSH_OK SSH_PrivSep WASnonroot 1 15 graft-2 4 bash-2 0 bzip-1 2 curl-7 12 3 db-4 14 dio-1 fix-modes-2 8 grep-2 gzip-1 6 iscda-1 less-381 lsof-4 78 memconf-1 65 net-snmp-5 openssh-4 0p1 openssl-0 9 7e orcallator-1 37 patchcheck-1 pcre-4 readline-4 rlwrap-0 18 rsync-2 ssh-keyinstall-1 0a sudo-1 8p6 tcp_wrappers-7 unzip-5 41 vim-6 zip-2 zlib-1 -traceroute-1 4a7 perl-5 swatch-3 top-3 5 tree-1 w3m-0 wget-1 siege-2 66 apg-2 coreutils-6 gawk-3 gd-2 23 gnuplot-3 7 jpeg-6b libpcap-0 libpng-1 md5sum-2 mergelog-4 netcat-1 10 rrdtool-1 48 samba-2 star-1 cvs-1 11 20 cvsrepor t-0 DTraceToolkit-0 99 ) Global expiry time for locks: 240 minutes Global anti-spam elapse time: 1 minutes Extensions which should not be directories = ( c h o gif jpg ) Suspicious filenames to be warned about = ( ) *********************************************** A few things didn't quite look right but I ploughed on regardless and ran the following command: cfexecd --foreground --no-splay --verbose --once And it comes back with: Checking integrity of the state database Checking integrity of the module directory Checking integrity of the input data for RPC Checking integrity of the output data for RPC Checking integrity of the PKI directory Making sure that locks are private... Looking for a source of entropy in /var/cfengine/randseed --------------------------------------------------------------------- Starting server --------------------------------------------------------------------- ------------------------------------------------------------------ LocalExec(not scheduled) at Wed Apr 4 08:45:39 2012 ------------------------------------------------------------------ cfexecd: cf:cfengine:tdukwbbuild:/var/cfengine/inputs/cf.main:13: scripts or commands must have absolute path names cfexecd: cf:cfengine:tdukwbbuild:/var/cfengine/inputs/cf.main:13: scripts or commands must have absolute path names cfexecd: cf:cfengine:tdukwbbuild:/var/cfengine/inputs/cf.ssh:12: scripts or commands must have absolute path names cfexecd: cf:cfengine:tdukwbbuild:/var/cfengine/inputs/cf.ssh:12: scripts or commands must have absolute path names cfexecd: cfengine:tdukwbbuild: Warning: varstring "/usr/sbin/svcadm refresh svc:/network/smtp:sendmail" contains the list iterator ':' - you should escape these close to non-separator characters so they don't get lost! (e.g. /bin/echo\: ) cfexecd: cfengine: concerns: sendmail cfexecd: cfengine:tdukwbbuild: Warning: varstring "/usr/sbin/svcadm refresh svc:/system/system-log:default" contains the list iterator ':' - you should escape these close to non-separator characters so they don't get lost! (e.g. /bin/echo\: ) cfexecd: cfengine: concerns: default cfexecd: cfengine:tdukwbbuild: Warning: varstring "/usr/sbin/svcadm refresh svc:/network/ssh:default" contains the list iterator ':' - you should escape these close to non-separator characters so they don't get lost! (e.g. /bin/echo\: ) cfexecd: cfengine: concerns: default cfexecd: cfengine:tdukwbbuild: Warning: varstring "/usr/sbin/svcadm restart svc:/network/ssh:default" contains the list iterator ':' - you should escape these close to non-separator characters so they don't get lost! (e.g. /bin/echo\: ) cfexecd: cfengine: concerns: default ********************************************* So something is obviously not quite right but I'm not entirely sure where to start looking. Whilst I try and get my head around the setup here I would appreciate any help / advice anyone has on my setup please. Thanks - J. _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine
