Re: Can't use host name regexps with trustkeysfrom

2010-03-03 Thread Neil Watson
Shouldn't the administrator have the option to decide how trustworthy the DNS service is? There are certainly no shortage of shoddy DNS services out there but not all. Making the Cfengine do some checking such as PTR records might be compromise. -- Neil Watson Linux/UNIX Consultant http://watso

Re: Can't use host name regexps with trustkeysfrom

2010-03-03 Thread Mark Burgess
I am thinking about how to respond to this. Principally, it is not a bug but a feature to force the use of IP addresses for the initial authentication. No matter whether you use DHCP or not, IP addresses are more secure than hostnames and your DHCP ranges are at least as stable as the names the

Re: challenge: last Saturday of the month

2010-03-03 Thread daniel . klein
Save yourself two shell commands - if you invoke cal with no arguments, it gives you this month's calendar. So skip the first two calls to date :-) -Dan > okay, I got it. Kinda hacky with all the pipes: > > vars: > "year" string => execresult("/usr/bin/date +%Y","noshell"); > "mont

Re: challenge: last Saturday of the month

2010-03-03 Thread Daniel V Klein
Okay, I'll see your classes and raise you a regexp for clarity! classes: January|March|May|July|August|October|December:: "Last_Saturday" and => { "Saturday", classmatch("Day(2[5-9]|3[01])") }; April|June|September|November:: "Last_Saturday" and => { "Saturday", classmatch("Da

Re: challenge: last Saturday of the month

2010-03-03 Thread Nicolas Charles
Christopher Browne wrote: > Nicolas Charles writes: > >> Why not simply using : >> >> classes: >> "Last_Saturday" expression => >> "Saturday.((Day31|Day30|Day29|Day28|Day27|Day26|Day25)|(Day24.(April|June|September|November)|(Day23.Day22.February))"; >> >> commands: >> Last_Saturday::

Re: challenge: last Saturday of the month

2010-03-03 Thread NWatson
Excellent work, both of you. This type of calendar work combined with remote classes can really drive home the idea of using Cf3 as an enterprise scheduler. We can further expand this idea to do things such as define business holidays when jobs, such as ETL or other financial batches, should n

Re: challenge: last Saturday of the month

2010-03-03 Thread Christopher Browne
Nicolas Charles writes: > Why not simply using : > > classes: > "Last_Saturday" expression => > "Saturday.((Day31|Day30|Day29|Day28|Day27|Day26|Day25)|(Day24.(April|June|September|November)|(Day23.Day22.February))"; > > commands: > Last_Saturday:: > "do something"; > > It does not

Re:Re: How to ensure cf-agent run as expected

2010-03-03 Thread liuyidaojian
Thanks Watson, Seems we can combine cf-runagent and cf-execd, just let cf-runagent ensure cf-execd in the crontab and this is cheap. Thanks, Ping. 在2010-03-03?22:55:05,nwat...@symcor.com?写道: >Use?edit?files?to?add?a?cf-execd?cron?entry.??There?are?examples?on?this? >list?and?in?online?document

Re: How to ensure cf-agent run as expected

2010-03-03 Thread NWatson
Use edit files to add a cf-execd cron entry. There are examples on this list and in online documentation. The runagent control section and the server access_rules control how the runagent will work. Performance depends one what the agent is doing. Some promises are cheap others are expensive.

How to ensure cf-agent run as expected

2010-03-03 Thread liuyidaojian
hi, I am a newbee to cfengine and just go through the refrence and tutorial. There are two ways to run cf-agent: a) install cf-execd in crontab on every agent machine. b) use cf-runagent to trigger. My question is how to ensure cf-agent there(in case someone remove the dir) and run as expect

RE: Can't use host name regexps with trustkeysfrom

2010-03-03 Thread Assarsson, Emil
Hi, FYI: I submitted 3 bug reports about this. Best regards, Emil Assarsson emil.assars...@sonyericsson.com Phone: +46 (0)10 8017422 -Original Message- From: Assarsson, Emil Sent: tisdag den 2 mars 2010 18:27 To: 'Mark Burgess' Cc: help-cfengine@cfengine.org Subject: RE: Can't use host

Re: challenge: last Saturday of the month

2010-03-03 Thread Nicolas Charles
Why not simply using : classes: "Last_Saturday" expression => "Saturday.((Day31|Day30|Day29|Day28|Day27|Day26|Day25)|(Day24.(April|June|September|November)|(Day23.Day22.February))"; commands: Last_Saturday:: "do something"; It does not take into account leap year, but it should

Re: challenge: last Saturday of the month

2010-03-03 Thread Mark Burgess
I never recommend using pipes in cfengine. You can do classmatch, AND, OR on the existing dates to accomplish the result. Perhaps first and last Mon-Sun are useful classes to build in. Matt Richards wrote: > okay, I got it. Kinda hacky with all the pipes: > > vars: > "year" string => e

Re: challenge: last Saturday of the month

2010-03-03 Thread Matt Richards
okay, I got it. Kinda hacky with all the pipes: vars: "year" string => execresult("/usr/bin/date +%Y","noshell"); "month"string => execresult("/usr/bin/date +%m","noshell"); "last_day" string => execresult("/usr/bin/cal $(month) $(year) | awk '{print $7}' | grep -E "^[0-9]" |

Re: challenge: last Saturday of the month

2010-03-03 Thread Matt Richards
Interesting. I had something similar with how to schedule for the last day of the month (ya, the shell commands are cheating a bit): vars: "year" string => execresult("/usr/bin/date +%Y","noshell"); "month"string => execresult("/usr/bin/date +%m","noshell"); "last_day" string

challenge: last Saturday of the month

2010-03-03 Thread NWatson
Over at Ars there was a discussion about scheduling a cron job for the last Saturday of each month. Alas, cron cannot do this on its own. What followed as a lot of short scripts to help but very few were portable. One of the newer goals of Cfengine is to be an enterprise scheduler. For fun a

Re: Who deletes all files in /var/cfengine/inputs?

2010-03-03 Thread NWatson
I use purge and I've not see any unexpected deletes at this time. I've had 3.0.2 running for several months on multiple servers. Sincerely, -- Neil Watson 416-673-3465 CONFIDENTIALITY WARNING This communication, including any attachments, is for the exclusive use of addressee and may contain

Re: Who deletes all files in /var/cfengine/inputs?

2010-03-03 Thread Erlend Leganger
Just for the record - removing purge fixed the problem, my cfengine inbox is empty and has been so for days, while the last seen report from cf-report shows that all clients check in with the policy server once every hour - sweet! - Erlend ___ Help-cfeng