Re: Cf_lastseen.db FriendStatus vs. DynamicAddresses

2006-03-21 Thread Jeremy Mates
* Ed Brown <[EMAIL PROTECTED]> > This might help: > > http://www.cfengine.org/docs/cfengine-Reference.html#lastseenexpireafter I like the FriendStatus reporting, though dislike the notifications about systems on DynamicAddresses subnets. Could cfengine be updated to exclude reports from DynamicAd

Re: copy function creates mode 600 by default ?

2006-03-21 Thread stucky
I'd say it is improper behaviour considering that I might wanna know when permissions on such a file have changed without getting email alerts every hour cause cfagent itself sets them to 600 and then to 644. I don't wanna know that so I have to turn the inform flag off. However, if someone just me

Re: copy function creates mode 600 by default ?

2006-03-21 Thread Eli Stair
Yes, I always get this in my current implementation... if I have a copy directive with explicit permissions, the file copies and immediately sets perms after copy to the correct ones. I don't get alerts on this alone since it occurs on the same pass, only an extra line when a file is actuall

Re: copy function creates mode 600 by default ?

2006-03-21 Thread stucky
Ok I narrowed it down and it turns out there is exactly one kind of file that this happens to. Some files (/etc/hosts is one of them) have both a copy AND an editfiles directive in cfagent.conf f.e. : control:   actionsequence = ( processes links files copy editfiles tidy ) copy:    $(confi

Professional support for cfengine

2006-03-21 Thread Scott Lackey
    While it is not my intention to spam the list, I would simply like to send out a notification that my organization is offering commercial support for cfengine. We do onsite consulting, code reviews and custom solutions. If any of you or your employing organization would be interested in having

Re: ReturnsZero and redirecting output

2006-03-21 Thread Stephen Fromm
On Tue, 2006-03-21 at 10:10 -0500, Brian E. Seppanen wrote: > I have the following code > > classes: > host_groupa:: > usera= ( ReturnsZero(/usr/bin/getent passwd usera) ) > > > shellcommands: > host_groupa.!usera:: > "/usr/sbin/useradd -g usera -d /expor

Re: Fwd: Re: Getting Group "Contents"]

2006-03-21 Thread Mark Burgess
Ed Brown wrote: I never saw this come out on [any] list last Thursday, so retrying to the new list... It's part reply, part suggestions for cfengine 3. I'd add that over the last 5 years, I've seen a lot of otherwise good programmers and admins struggle with embracing/adopting cfengine because

Fwd: Re: Getting Group "Contents"]

2006-03-21 Thread Ed Brown
I never saw this come out on [any] list last Thursday, so retrying to the new list... It's part reply, part suggestions for cfengine 3. I'd add that over the last 5 years, I've seen a lot of otherwise good programmers and admins struggle with embracing/adopting cfengine because of difficulty unde

unsubscribe

2006-03-21 Thread Rich Hall
unsubscribe [EMAIL PROTECTED] ___ Help-cfengine mailing list Help-cfengine@cfengine.org http://cfengine.org/mailman/listinfo/help-cfengine

Re: ReturnsZero and redirecting output

2006-03-21 Thread Brendan Strejcek
Atom Powers wrote: > On 3/21/06, Jim Wight <[EMAIL PROTECTED]> wrote: > > > > How about > > usera = ( ReturnsZero(/bin/sh -c ${quote}/usr/bin/getent passwd usera > > >/dev/null${quote}) ) > > > > Add to trap errors for truely silent operation: " ... >/dev/null 2>&1 ..." I would recommend not us

Re: ReturnsZero and redirecting output

2006-03-21 Thread Atom Powers
On 3/21/06, Jim Wight <[EMAIL PROTECTED]> wrote: > > How about > usera = ( ReturnsZero(/bin/sh -c ${quote}/usr/bin/getent passwd usera > >/dev/null${quote}) ) > Add to trap errors for truely silent operation: " ... >/dev/null 2>&1 ..." > ___ > Help-cfe

Re: ReturnsZero and redirecting output

2006-03-21 Thread Brendan Strejcek
Ed Brown wrote: > On Tue, 2006-03-21 at 10:10 -0500, Brian E. Seppanen wrote: > > > Does someone know of an easier way of testing for the existence of a > > user that wouldn't require a call to getent? Just wondering if there > > is a better solution out there. > > Don't know if this is better, bu

Re: ReturnsZero and redirecting output

2006-03-21 Thread Jim Wight
On Tue, 2006-03-21 at 10:10 -0500, Brian E. Seppanen wrote: > I have the following code > > classes: > host_groupa:: > usera= ( ReturnsZero(/usr/bin/getent passwd usera) ) > > So what that would do is evaluate a class usera if /usr/bin/getent passwd > usera returns 0 if

Re: ReturnsZero and redirecting output

2006-03-21 Thread Jason Martin
On Tue, Mar 21, 2006 at 10:10:33AM -0500, Brian E. Seppanen wrote: > /dev/null. So that is the first question.how can I take output from > the command passed to ReturnsZero and send it to /dev/null? Create a small script that runs the getent and redirects the result to /dev/null, but preserv

ReturnsZero and redirecting output

2006-03-21 Thread Brian E. Seppanen
I have the following code classes: host_groupa:: usera= ( ReturnsZero(/usr/bin/getent passwd usera) ) shellcommands: host_groupa.!usera:: "/usr/sbin/useradd -g usera -d /export/home/usera -s /usr/local/bin/scponly -m -k /etc/skel usera" So what that wo

Re: Cf_lastseen.db

2006-03-21 Thread Jim Wight
On Tue, 2006-03-21 at 13:54 +, Jim Wight wrote: > The most recent run has reported as follows: > > *: Host x.x.x.x (hailed us) last at Sun Mar 19 23:39:41 2006 > i.e. not seen for 37.63 hours > (Expected = 5184.63 secs (= 1.44 hours) (Expires 90 days) > > However, there is an

Re: Cf_lastseen.db

2006-03-21 Thread Jim Wight
On Fri, 2006-03-17 at 15:06 -0600, Brendan Strejcek wrote: > This is how I use FriendStatus on my policy server: > > control: > LastSeenExpireAfter = ( 14 ) > > alerts: > policyhost:: > FriendStatus(24) > ifelapsed=10080 # Warn no more often than once per week I have

Re: ReturnsZero and redirecting output

2006-03-21 Thread Ed Brown
On Tue, 2006-03-21 at 10:10 -0500, Brian E. Seppanen wrote: > Does someone know of an easier way of testing > for the existence of a user that wouldn't require a call to getent? > Just wondering if there is a better solution out there. Don't know if this is better, but it is quieter: you can a