Re: another segfault in cf-agent

2010-02-24 Thread Mark Burgess
Jesse - can you please compile with debugging symbols -g so that the backtrace shows some details? M Jesse Becker wrote: > I'm getting another segfault when running cf-agent, but it is not always > reproducable. Given two runs back-to-back with no config file changes > between, the first may f

another segfault in cf-agent

2010-02-24 Thread Jesse Becker
I'm getting another segfault when running cf-agent, but it is not always reproducable. Given two runs back-to-back with no config file changes between, the first may fail, but the second will succeed. I don't think that I've seen two failures in a row of this nature. I'm running the RPM communit

showstate and missing information

2010-02-24 Thread NWatson
How does the agent go about find state information? How can one help it find such information? This example using cf 3.0.2 [r...@unxxhd01 inputs]# cf-agent -KIf ./state.cf R: Show state: R: State parameter diskfree is not known or recorded R: State parameter loadavg is not known or recorded R:

.mil domain and help-cfengine@cfengine.org

2010-02-24 Thread Ingersoll, Robert
Evidently there is an issue registering a .mil email address - I never receive the confirmation email. Can this be changed? Thanks Bob The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any

RE: Directory is controlled by another user - trusting its contentispotentially risky (possible race)

2010-02-24 Thread Ingersoll, Robert
BINGO! maryann:/home/root# cat test.cf body common control { bundlesequence => {"main"}; } bundle agent main { files: any:: "/var/opt/ids" depth_search=> recurse(1), file_select => by_name("alert\.log\.[0-9]{1,

Re: Directory is controlled by another user - trusting its contentispotentially risky (possible race)

2010-02-24 Thread Mark Burgess
I'll add the uid to the error message t make it clearer Ingersoll, Robert wrote: > maryann:/home/root# cat test.cf > body common control > { > bundlesequence => {"main"}; > } > > bundle agent main > { > files: > any:: > "/var/opt/ids/alert\.log\.[0-9]{1,2}" >

RE: Directory is controlled by another user - trusting its contentispotentially risky (possible race)

2010-02-24 Thread Ingersoll, Robert
maryann:/home/root# cat test.cf body common control { bundlesequence => {"main"}; } bundle agent main { files: any:: "/var/opt/ids/alert\.log\.[0-9]{1,2}" file_select => "plain", transformer => "/bin/compress -f $(this.promiser)"; } bod

RE: Directory is controlled by another user - trusting its contentispotentially risky (possible race)

2010-02-24 Thread Ingersoll, Robert
# ls -al /var/opt total 704 dr-xr-xr-x 28 binbin 8192 Feb 1 09:58 . dr-xr-xr-x 27 binbin 8192 Nov 17 07:34 .. drwxr-xr-x 3 applmgroaa 96 Feb 16 2007 PKI drwxr-xr-x 2 applmgroaa 96 Jul 30 2009 applmgr dr-xr-xr-x 2 bin

Re: Directory is controlled by another user - trusting its content ispotentially risky (possible race)

2010-02-24 Thread NWatson
help-cfengine-boun...@cfengine.org wrote on 2010-02-24 11:00:34: > > It means you are doing a recursive search that changes something, as root. > If you pass through a directory controlled by a non-root user, that user > could potentially redirect your changes to another location by > linking,

Re: Directory is controlled by another user - trusting its content ispotentially risky (possible race)

2010-02-24 Thread Mark Burgess
It means you are doing a recursive search that changes something, as root. If you pass through a directory controlled by a non-root user, that user could potentially redirect your changes to another location by linking, hence the warning. Ingersoll, Robert wrote: > Any ideas? > > # cat test.cf

RE: Directory is controlled by another user - trusting its content ispotentially risky (possible race)

2010-02-24 Thread NWatson
what does ls -al /var/opt show? Sincerely, -- Neil Watson 416-673-3465 CONFIDENTIALITY WARNING This communication, including any attachments, is for the exclusive use of addressee and may contain proprietary and/or confidential information. If you are not the intended recipient, any use, copy

RE: Directory is controlled by another user - trusting its content ispotentially risky (possible race)

2010-02-24 Thread Ingersoll, Robert
Any ideas? # cat test.cf body common control { bundlesequence => {"main"}; } bundle agent main { files: any:: "/var/opt/ids/alert\.log\.[0-9]{1,2}" transformer => "/bin/compress -f $(this.promiser)"; } # cf-agent -KI -f ./test.cf Directory /var in search

lastseen confusion

2010-02-24 Thread NWatson
I've configured the reported to include last_seen. body reporter control { reports => { "audit", "performance", "all_locks", "active_locks", "hashes", "classes", "last_seen", "monitor_now", "monitor_history", "monitor_summary"

Re: updating a passwd

2010-02-24 Thread Mark Burgess
You should try the current version. 3.0.4 will be released in March Henning Fehrmann wrote: > Hello, > > we tried to use cfengine3 v3.0.2 to update our /etc/passwd. > > The promises.cf reads: > > body common control > { > bundlesequence => { >

updating a passwd

2010-02-24 Thread Henning Fehrmann
Hello, we tried to use cfengine3 v3.0.2 to update our /etc/passwd. The promises.cf reads: body common control { bundlesequence => { "handle_passwd" }; inputs => {

Re: cfengine2, dhcp clients and keys

2010-02-24 Thread Mark Burgess
Don't look at 2, 3 is the currently supported version. Assarsson, Emil wrote: > Hej! > > I was looking for the version 2. Thanks for the hint and the quick reply :-) > http://www.cfengine.org/manuals/cf2-Reference.html#HostnameKeys-in-cfagent > > Best regards, > Emil Assarsson emil.assars...@so

RE: cfengine2, dhcp clients and keys

2010-02-24 Thread Assarsson, Emil
Hej! I was looking for the version 2. Thanks for the hint and the quick reply :-) http://www.cfengine.org/manuals/cf2-Reference.html#HostnameKeys-in-cfagent Best regards, Emil Assarsson emil.assars...@sonyericsson.com Phone: +46 (0)10 8017422 -Original Message- From: Mark Burgess [mail

Re: cfengine2, dhcp clients and keys

2010-02-24 Thread Mark Burgess
Hej, http://www.cfengine.org/manuals/cf3-reference.html#dynamicaddresses-in-server http://www.cfengine.org/manuals/cf3-reference.html#hostnamekeys-in-server Assarsson, Emil wrote: > Hi, > > I'm starting to take a second look on CFengine after being on the Puppet > track for some time. > > Is

cfengine2, dhcp clients and keys

2010-02-24 Thread Assarsson, Emil
Hi, I'm starting to take a second look on CFengine after being on the Puppet track for some time. Is there any way to make cfengine to trust DNS PTR records instead of binding the key to the IP? We are using DHCP to supply IP addresses so the IP addresses are not useful. Best regards Operatio

Re: Defining Classes

2010-02-24 Thread NWatson
> > bundle common g > { classes: # missing > "Live" or => { "server1", "server2"} ; > "Acceptance" or => { "server3", "server4"} ; > "TestAndDev" or => { "ugos563" } ; > "AllServers" or => Live.Acceptance.TestAndDev; # last is not or but expressi

Defining Classes

2010-02-24 Thread Mark Nelson
Hello I am tring to define some global classes, I have a series of machines that make up a system. I have defined a series of classes that make up each individual component of the system i.e. - Acceptance - Live - Test I am trying to define a class that contains all the classes above. My code

Re: more wish list observations

2010-02-24 Thread Mario Heidmann
By the way: Suse classes depend on the RPM package lsb. Once installed, these addidtional hard classes are added to a SLES11 system: lsb_compliant, suse, suse_n/a, suse_11 without lsb, the os is only identified by "SuSE" and "SLES11". Regards, Mario > These are more observations I've made ov