Forum: CFEngine Help
Subject: Re: again, cf-runagent
Author: davidlee
Link to topic: https://cfengine.com/forum/read.php?3,25915,25922#msg-25922

I wonder whether you're hitting exactly the same head-banging bug that I hit a 
few weeks ago?  (Mine was with 3.1.4, but it wouldn't surprise me if it is 
still present with 3.3.x)

You have (in essence):


bundle server access_rules()
{
  access:
    any::

      "$(sys.cf_agent)"
         admit => { "$(sys.policy_hub)" };

}


Try replacing the "$(sys.cf_agent)" with the actual, fully-spelled-out, 
pathname for your system e.g. "/var/cfengine/bin/cf-agent".  (Note that this is 
on the "cf-agent", not "cf-runagent"; it is about how the client's "cf-agent" 
grants (or denies) access to itself by the external hub's cf-runagent.)

See bug 1103.

For me, it was the fine detail of the debug ("-d2") output on cf-serverd that 
eventually gave a glimpse and hint of what might be going on.

_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to