Re: lastseen confusion

2010-03-01 Thread Erlend Leganger
On 1 March 2010 17:50, Mark Burgess wrote: > > I take the example in the reference manual > > http://www.cfengine.org/manuals/cf3-reference.html#control-reporter > > and run it: > > cf-report -f ~/tmp/cftest.cf > > Then I open the html page produced /tmp/nerves/last-seen.html > > Peers as last se

Re: Editing known_hosts files

2010-03-01 Thread Daniel V Klein
Racing to leave for a trip, but take a look at set_variable_values in the cfengine_stdlib.cf - it'll take some tweaking, but it has the logic to "make sure some part of the line that looks 'like' this contains 'that', but ensure that there are no other lines that contain 'this'. The logic is all t

Basic string replacement

2010-03-01 Thread Jesse Becker
I feel like I'm missing something really obvious here: is there a way to do basic string search and replacement? For example, I have a string "foo:bar:baz", and I want to convert ":ba" into "-DA". Thus, the output string would be "foo-DAr-DAz". This is trivial in perl/sed/awk, but I can't find

RE: Editing known_hosts files

2010-03-01 Thread Justin Lloyd
Thanks, Mark. I think that for the time being, however, since I need to make progress with this issue this week for our pilot deploy, I'm going to take a more naïve approach and "hard-code" the solution with something like the following, since I know what the key string looks like: delete_lines

Re: Editing known_hosts files

2010-03-01 Thread Daniel V Klein
Justin- And the reason I mentioned regextract() is that I know that a new Nova release is coming RSN. You can certainly get the last field from a line with a regex that looks like '.*\s(.*)', relying on the greed of the first pattern, and then grabbing $(match.1) as the field you want, and doing

RE: Editing known_hosts files

2010-03-01 Thread NWatson
Some ssh_config settings might be less stressful: StrictHostKeyChecking, VerifyHostKeyDNS. Also see "VERIFYING HOST KEYS" in man ssh. Sincerely, -- Neil Watson 416-673-3465 CONFIDENTIALITY WARNING This communication, including any attachments, is for the exclusive use of addressee and may c

RE: Editing known_hosts files

2010-03-01 Thread Justin Lloyd
Dan, Unless I'm missing something, that's not feasible for us since we use Nova. We'd need to wait for new packages (for all of our platforms) that are built on the latest version of Community and then upgrade all systems. (The Nova upgrade process, especially for bug fixes and new features, is a

Re: Editing known_hosts files

2010-03-01 Thread daniel . klein
In the latest version, look at regextract() - I think that'll help get the field you want, so you can do your insert... -Dan > No responses? Ok, let me restate the problem more simply. > > Given a file whose lines have three space-delimited fields, and given a > string variable that contains a s

RE: Editing known_hosts files

2010-03-01 Thread Justin Lloyd
We have a trusted root host from which we can ssh as root (via sudo) without the remote host's root password to any host that has the trusted host's root key. (Obviously the trusted root host is tightly secured.) I want Cfengine to ensure that the appropriate systems have that trusted host's roo

cf3 community - mySQL?

2010-03-01 Thread Matt Richards
Greetings, I was wondering if there was any reason to compile mySQL into the community edition of cfengine. It seems like only the enterprise edition uses it. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo

RE: Editing known_hosts files

2010-03-01 Thread NWatson
I'm still not sure why you might want to do this. Ssh already gives out public keys upon request. Why distribute them using CF? Are you looking to control incidents when the public key changes? Sincerely, -- Neil Watson 416-673-3465 CONFIDENTIALITY WARNING This communication, including any

RE: Editing known_hosts files

2010-03-01 Thread Justin Lloyd
Sorry, that delete_lines promise should have read delete_lines: ".*$(fields[2])"; -Original Message- From: help-cfengine-boun...@cfengine.org [mailto:help-cfengine-boun...@cfengine.org] On Behalf Of Justin Lloyd Sent: Monday, March 01, 2010 11:50 AM To: Help-cfengine Subject: RE: Editin

RE: Editing known_hosts files

2010-03-01 Thread Justin Lloyd
No responses? Ok, let me restate the problem more simply. Given a file whose lines have three space-delimited fields, and given a string variable that contains a similar line, how do I replace the entire line in the file whose third field matches the third field in the string with that variable? I

Cfengine and Xen Configuration!

2010-03-01 Thread Jan Muhammad
Hi, I'm interested to configure/test CFengine on virtualized environment (Xen-based). I'm assuming that dom0 would manage its domU with Cfengine.  I wonder some one has any tutorial guide on that. Thanks in advance for help! -Jan Muhammad

Re: lastseen confusion

2010-03-01 Thread Mark Burgess
I take the example in the reference manual http://www.cfengine.org/manuals/cf3-reference.html#control-reporter and run it: cf-report -f ~/tmp/cftest.cf Then I open the html page produced /tmp/nerves/last-seen.html Peers as last seen by atlas This report was last updated at Mon Mar 1 17:43:51

Question about bundle agent names

2010-03-01 Thread Bas van der Vlies
I am playing with cfengine3 (3.0.3) and i am confused about agent bundle names. In my promise file i have: bundlesequence => { "update", "check_cfengine", }; inputs => { "update.cf", "

Re: Can't use host name regexps with trustkeysfrom

2010-03-01 Thread Mark Burgess
Try running the server with -v to see the reason for the failure. Regex are allowed in trustkeys Assarsson, Emil wrote: > Hi, > > It seems like I can't use hostnames with (for example) trustkeysfrom: > > body server control > { > trustkeysfrom => { '.*\.domain\.net' }; > dynamicaddress

Can't use host name regexps with trustkeysfrom

2010-03-01 Thread Assarsson, Emil
Hi, It seems like I can't use hostnames with (for example) trustkeysfrom: body server control { trustkeysfrom => { '.*\.domain\.net' }; dynamicaddresses => { '10\..*'}; allowconnects => { '10\..*' }; hostnamekeys => "true"; } I get a "!! Authentication dialogue with cfserver.dom

AW: AW: AW: Remote Access

2010-03-01 Thread Seifert, Christian
I add the command: "cfruncommand => "/var/cfengine/bin/cf-agent";" But I get the same error message... cf3 New connection...(from :::192.168.78.50/4) cf3 Spawning new thread... cf3 Received: [CAUTH 192.168.78.50 hgesnm3.sz.salzgitter-ag.de root 0] on socket 4 cf3 Allowing 192.168.78.50 to con

Re: AW: AW: Remote Access

2010-03-01 Thread NWatson
I don't see cfruncommand. Sincerely, -- Neil Watson 416-673-3465 CONFIDENTIALITY WARNING This communication, including any attachments, is for the exclusive use of addressee and may contain proprietary and/or confidential information. If you are not the intended recipient, any use, copying, d

Re: AW: AW: Remote Access

2010-03-01 Thread Nakarin Phooripoom
You need to give a path to the cf-agent (cfruncommand) inside body server control. cfruncommand => "/var/cfengine/bin/cf-agent"; http://www.cfengine.org/manuals/cf3-reference.html#cfruncommand-in-server Cheers, --Nakarin On Mar 1, 2010, at 2:59 PM, Seifert, Christian wrote: > That ist my cf-s

AW: AW: Remote Access

2010-03-01 Thread Seifert, Christian
That ist my cf-serverd.cf config file: body server control { trustkeysfrom => { "192.168.78.50" }; allowconnects => { "192.168.78.50" }; maxconnections => "10"; logallconnections => "true"; allowusers => { "root" }; } bundle server access_rules { access: "/srv/cf-serverd"

Re: AW: Remote Access

2010-03-01 Thread NWatson
"cf3 User root is not allowed on this server" Does the server have 'allowusers' defined? Sincerely, -- Neil Watson 416-673-3465 CONFIDENTIALITY WARNING This communication, including any attachments, is for the exclusive use of addressee and may contain proprietary and/or confidential informat

AW: Remote Access

2010-03-01 Thread Seifert, Christian
I started "cf-serverd -v" on the client before and then get these messages: On the policyserver if I run cf-runagent -v: cf3 -> Negated Classes = { } cf3 Initiate variable convergence... cf3 Initiate control variable convergence... cf3

Re: Remote Access

2010-03-01 Thread NWatson
Is there a cf-serverd process running on 172.24.1.58? Does that process grant access to the remote host where cf-runagent is initiated? Sincerely, -- Neil Watson 416-673-3465 CONFIDENTIALITY WARNING This communication, including any attachments, is for the exclusive use of addressee and may

Remote Access

2010-03-01 Thread Seifert, Christian
Hello, I've added the following lines to my promises.cf on the server: body runagent control { hosts => { "172.24.1.58" }; } After that I get the following message if I run "cf-runagent -v": cf3 ... cf3 * Hailing 172.

Re: File Transfer

2010-03-01 Thread Erlend Leganger
On 1 March 2010 11:44, Seifert, Christian wrote: > > Hello everybody, > > i’ve succesfully tested the file transfer between my host und my policy > server. > > My problem is: > > I have a file on my server test.txt > > I can transfer this file from my server to a client if I started the server >

Re: File Transfer

2010-03-01 Thread Jarle Bjørgeengen
On Mar 1, 2010, at 11:44 , Seifert, Christian wrote: > > I want to start the transfer from the server and not from the > client. I think the transfer command should be on the server to > manage my network. > > I hope you can understand my problem. See chapter 6.2.1 in http://www.cfengine.org/

Re: File Transfer

2010-03-01 Thread Nicolas Charles
No, the server only serves the files (and handles the access right). It's the client duty to go and ask for the files, because only the client can know if he has to transfer the file or not. If you want to manage your network, you should configure your splaytime, or use a temporal class (like H

File Transfer

2010-03-01 Thread Seifert, Christian
Hello everybody, i've succesfully tested the file transfer between my host und my policy server. My problem is: I have a file on my server test.txt I can transfer this file from my server to a client if I started the server with the command "cf-serverd -v" and the client with "cf-agent". But the c

Cfengine Bug Tracker

2010-03-01 Thread Eystein Måløy Stenberg
HI all, As some of you probably already know, there is now a Cfengine bug tracker online at http://bug.cfengine.com/. You can use it to check if any problems you encounter is a reported bug, and if it is already fixed. Anyone can view the issues, and it's easy to register to be able to report an i