RE: Managing Solaris logadm.conf

2010-05-27 Thread Justin Lloyd
Seva, I thought about something like that. One complication is that it's not just the wtmpx log. I left others out for simplicity. The approach you suggest would require a similar regex check for each log. One approach that came to mind this morning when discussing this with a colleague would

Re: cf-runagent adn understanding cfengine work process

2010-05-27 Thread Vasiliy G Tolstov
В Срд, 26/05/2010 в 10:53 +0400, Vasiliy G Tolstov пишет: > Hello. > > I'm try to understand cfengine (manuals already read, but not fully > understand) Hmm. Already found solution (cf-agent -f xxx.cf). Another question - can i provide parameters to agent bundle in command line? For example i ne

cf-runagent adn understanding cfengine work process

2010-05-27 Thread Vasiliy G Tolstov
Hello. I'm try to understand cfengine (manuals already read, but not fully understand) I'm create file: cf-server:/var/cfengine/inputs# cat app_pkg_lamp.cf body common control { bundlesequence => { "app_apache", "app_mysql", "app_php" }; inputs => { "cfengine_stdlib.cf", "app

Re: UNIX groups

2010-05-27 Thread Nakarin Phooripoom
I would follow to the first approach, getting to the forth column of the match lines then appending users from lists, like the following. body common control { bundlesequence => { "def","test" }; } bundle common def { vars: aix:: "groups" slist => { "unix","dba","support" }; "grp

policy server connection errors

2010-05-27 Thread Seva Gluschenko
Hello folks, There's an error report which happens on regular basis since a number of managed servers grew to 100+: BAD: keys did not match !! Authentication dialogue with X.X.X.X failed I'm virtually sure that there're no hijacking attempts in my network, so I suppose that happens because of s

Re: UNIX groups

2010-05-27 Thread Seva Gluschenko
Johan, it seems like you should add policy => overridable to the relevant variable in the append_user_field bundle. On the other hand, it seems like it worth of trying a different approach: vars: "grp[unix]" string => "unix:!:1000:"; "grp[dba]" string => "dba:!:1001:"; "grp[support]" string

RE: global vars in bundle common not in scope for body?

2010-05-27 Thread Assarsson, Emil
Worked fine. Thanks :-) -- Emil -Original Message- From: Nakarin Phooripoom [mailto:mynameisje...@gmail.com] Sent: torsdag den 27 maj 2010 10:23 To: Assarsson, Emil Cc: help-cfengine Subject: Re: global vars in bundle common not in scope for body? Global variables can be access by writi

UNIX groups

2010-05-27 Thread Johan Marcusson
Hello list, I'm new to CFengine, and I'm trying to set up synchronization of user accounts between some AIX-boxes. The user account part is working, but I'm having some issues with group memberships. I want to add some users to group "unix", some users to group "dba" and some users to group "su

Re: global vars in bundle common not in scope for body?

2010-05-27 Thread Nakarin Phooripoom
Global variables can be access by writing $(bundle.variable). Please try; body copy_from secopy(from) { source => "$(globals.sourcebase)/$(from)"; servers => { @(globals.servers) }; compare => "digest"; encrypt => "true"; trustkey=> "true"; } Cheers, --Nakarin

global vars in bundle common not in scope for body?

2010-05-27 Thread Assarsson, Emil
Hi, Shouldn't the global vars be in scope for the copy_from body? Can't make it work: bundle common globals { vars: "servers" slist => { "cfe01.intra.net" }; "sourcebase" string => "/srv/cfe"; } body copy_from secopy(from) { source => "$(sourcebase)/$(from)"; s