Michael,
Perhaps, you might run into issue with keys overlapping on server
under the heavy load which have been fixed in 3.0.5. We didn't have to
regenerate keys on client side after upgrade, but we had to re-upload
several public keys from clients on the policy server. Also, if your
client authen
That's odd. Nothing at all has changed in the RSA code, except perhaps the
version of
openssl you compile with.
mega...@gmail.com wrote:
> Got the verbose server output, and this seemed to be the error:
>
> cf3 Received: [SAUTH y 256 37 c] on socket 5
> cf3 Private decrypt failed = block type i
Got the verbose server output, and this seemed to be the error:
cf3 Received: [SAUTH y 256 37 c] on socket 5
cf3 Private decrypt failed = block type is not 02
cf3 Auth dialogue error
cf3 REFUSAL of request from connecting host: (SAUTH y 256 37 c)
I then regenerated the ppkeys for both the server
Forum: Cfengine Help
Subject: this.promiser not expanding in edit_line bundle
Author: reverb
Link to topic: https://cfengine.com/forum/read.php?3,17811,17811#msg-17811
I was trying to follow the example for distributing SSH keys from the solution
guide (http://www.cfengine.org/manuals/cf3-solutio
Hello,
cfengine 3.0.5, did not see anything in the Changelog if this is/was fixed.
Here is the test:
crash.cf:
body common control
{
ignore_missing_bundles => "true";
bundlesequence => { "action" };
}
bundle agent action
{
methods:
"any" usebundle => cr
Forum: Cfengine Help
Subject: Re: Cfengine Help: Re: cfengine v3 equivalent of ->!
Author: neilhwatson
Link to topic: https://cfengine.com/forum/read.php?3,17806,17808#msg-17808
move_obstruction goes in the files: promise not the body part.
http://www.cfengine.org/manuals/cf3-reference.html#move
ah, yes, thanks. sorry, brain meltdown looking at this too long.
- Original Message -
From: Wes Hardin
To: JIM AMANATIDIS (BLOOMBERG/ 731 LEXIN)
Cc: help-cfengine@cfengine.org
At: 7/28 11:13:43
move_obstructions doesn't belong in the link_from body, it's part of the parent
promise. S
move_obstructions doesn't belong in the link_from body, it's part of the parent
promise. See example from docs:
files:
"/tmp/testcopy"
copy_from=> mycopy("/tmp/source"),
move_obstructions => "true",
depth_search => recurse("inf");
The example shows it paired with a copy_
I tried that, got error:
# cf-promises
cf3:/var/cfengine/inputs/libs.cf:41,30: Constraint lvalue move_obstructions is
not allowed in 'link_from' constraint body, near token 'true"'
Here is the body:
body link_from ln_s(x) {
link_type => "symlink";
source => "$(x)";
move_obstructions =>
Maybe you need "move_obstructions" then?
http://www.cfengine.org/manuals/cf3-reference.html#move_005fobstructions-in-files
--
/* Wes Hardin */
UNIX System Administrator, IT Engineering Support
Maxim Integrated Products: Innovation Delivered
On 07/28/2010 09:52 AM, JIM AMANATIDIS, BLOOMBERG/ 731
Thanks, but that's not the issue I am having.
My source file already exists (it's a plain file)
My target file also exists.
With ->! I was able to nuke the plain file and establish a symbolic link to the
target file.
I looked at the reference documentation, the "when_no_source" parameter doesn't
Forum: Cfengine Help
Subject: Re: cfengine v3 equivalent of ->! symbolic links
Author: neilhwatson
Link to topic: https://cfengine.com/forum/read.php?3,17802,17803#msg-17803
‘when_no_source’ ?
http://www.cfengine.org/manuals/cf3-reference.html#link_005ffrom-in-files
Forum: Cfengine Help
Subject: Re: Loop through file in cfengine3?
Author: ryan.c.ander...@gmail.com
Link to topic: https://cfengine.com/forum/read.php?3,16856,17801#msg-17801
I have found a solution that lets me update the contents of the shadow file for
any number of users I like by reading a sh
Hello all,
Went through the documentation, I don't see an equivalent of forcing a
symbolic link to be created if the source file is not a symlink. For example:
/my_symlink =>! /target
Will ensure that /my_symlink is always a symlink to /target.
Is there a version 3 equivalent? I only found
Forum: Cfengine Help
Subject: Re: Prevent cf-agent execution overlaps
Author: Seva Gluschenko
Link to topic: https://cfengine.com/forum/read.php?3,17765,17800#msg-17800
Well, now I've faced the problem sourced by overlapped execution, as follows:
cf3 Couldn't obtain lock for
lock.ldap_conf.inse
On Wed, Jul 28, 2010 at 8:47 PM, Mark Burgess wrote:
>
> It sounds strange. Did you only upgrade half the systems? Nothing should stop
> working.
Nope - upgraded both cf-serverd and cf-execd, and was running
cf-runagent on same host as the cf-serverd I was contacting. I will
check the output of
It sounds strange. Did you only upgrade half the systems? Nothing should stop
working.
On 07/28/2010 10:11 AM, Michael Potter wrote:
> Ill give that a try tomorrow. I just don't know what could have
> changed from 3.0.4 to 3.0.5p1 that caused a working configuration to
> break. I wonder if I nee
Ill give that a try tomorrow. I just don't know what could have
changed from 3.0.4 to 3.0.5p1 that caused a working configuration to
break. I wonder if I need to regenerate my ppkeys after an upgrade
On Wed, Jul 28, 2010 at 3:22 PM, Seva Gluschenko
wrote:
> To obtain verbose server output, yo
18 matches
Mail list logo
