cf-serverd stops working after a day

Hi, I'm running cfengine-community 3.0.5-1 on ubuntu. The server stops handeling requests after a day or so and if I check with netstat all connections are either SYN_RECV or CLOSE_WAIT. After a restart of the cf-serverd clients gets reset and new connections becomes ESTABLISHED (netstat). Doe

RE: aborted on defined class?

maxconnections => "2"; default_repository => "/var/cfengine/repository"; environment => { "PATH=/bin:/usr/bin:/sbin:/usr/sbin", "LANG=C" }; } --- -- Emil -Original Message- From: Nicolas Charles [mailto:nicolas.char...@normation.com]

aborted on defined class?

Hi, I got a strange message and I'm clueless: "cf-agent aborted on defined class "dhclient_conf" defined in bundle dhcp" It puzzles me even more that I don't get this every time even if I run "cf-agent -K" --- #--- # Th

RE: Cfengine Help: Re: When will locks be removed?

This is exactly what I was hoping for :-) The documentation could use an update on this. -- Emil -Original Message- From: help-cfengine-boun...@cfengine.org [mailto:help-cfengine-boun...@cfengine.org] On Behalf Of no-re...@cfengine.com Sent: onsdag den 23 juni 2010 17:04 To: help-cfengin

When will locks be removed?

Hi, If I have promises with ifelapsed set to 10080 and I want to make an update to that promise. How can I make that lock to be removed so it will run again? Best regards Emil Assarsson Sony Ericsson Mobile Communications AB "The information in this email, and attachment(s) thereto, is stric

RE: Denying repeated connection from

made by other things than agents. My point is that the documentation isn't clear and that I'm missing an option. -- Emil -Original Message- From: Seva Gluschenko [mailto:seva.glusche...@gmail.com] Sent: måndag den 21 juni 2010 12:35 To: Assarsson, Emil Cc: help-cfengine Subje

Denying repeated connection from

Hi, It might be worth mention in the documentation: - that allowconnects will only accept 1 connection per client. - log entries "Denying repeated connection from" are a consequence of multiple of connection from clients when the server only permits one. - allowallconnects on server or setting m

RE: global vars in bundle common not in scope for body?

Worked fine. Thanks :-) -- Emil -Original Message- From: Nakarin Phooripoom [mailto:mynameisje...@gmail.com] Sent: torsdag den 27 maj 2010 10:23 To: Assarsson, Emil Cc: help-cfengine Subject: Re: global vars in bundle common not in scope for body? Global variables can be access by

global vars in bundle common not in scope for body?

Hi, Shouldn't the global vars be in scope for the copy_from body? Can't make it work: bundle common globals { vars: "servers" slist => { "cfe01.intra.net" }; "sourcebase" string => "/srv/cfe"; } body copy_from secopy(from) { source => "$(sourcebase)/$(from)"; s

RE: Escape filename in copy_from?

It was a typo that made it fail :-P -- Emil -Original Message- From: Mark Burgess [mailto:mark.burg...@iu.hio.no] Sent: onsdag den 26 maj 2010 14:34 To: Assarsson, Emil Cc: help-cfengine Subject: Re: Escape filename in copy_from? If you can't use % in the file name, please report

Escape filename in copy_from?

Hi, Is there a way to have filenames on the server that contains "%" and how do I escape those filenames in a copy_from statement? I think that this should be mentioned in the documentation but it isn't. Best regards Emil Assarsson Sony Ericsson Mobile Communications AB "The information in th

RE: matching a new [section] or EOF with select_end in a select_region body

Ok great I'll use my workaround until the new release :-P -- Emil -Original Message- From: d...@lonewolf.com [mailto:d...@lonewolf.com] On Behalf Of daniel.kl...@cfengine.com Sent: tisdag den 13 april 2010 17:47 To: Assarsson, Emil Cc: help-cfengine Subject: Re: matching a new [se

matching a new [section] or EOF with select_end in a select_region body

Hi, Does anyone have a solution to match the EOF if there are no more sections in a file? This body is suggested in the documentation but it doesn't handle EOF. - body select_region MySection(x) { select_start => "\[$(x)\]"; select_end => "\[.*\]"; } - My current solution is to add anot

RE: Deletion of directory doesn't work?

rent version, because this has been raised > before. Perhaps not... > > On Thu, Apr 1, 2010 at 9:46 PM, Michael Potter wrote: > You need to end the dir name in /. > > >> On 01/04/2010 9:44 PM, "Assarsson, Emil" >> wrote: >> >> Hi, >

Deletion of directory doesn't work?

Hi, I can't remove an empty directory. I think that is should be a simple procedure but it doesn't work. What on earth do I do wrong? - bundle agent rmdirtest { files: "/tmp/junkdir" delete => delete_all; } body delete delete_all { dirlinks => "delete";

message about SQL in cummunity edition

Hi, Why does cf3 keeps printing out this message even if Im not using any sql features? Bug? "cf3 Verifying SQL table promises is only available with Cfengine Nova or above" Best regards Operational Services LUX Application Platforms within BI Enterprise Services Emil Assarsson Sony Ericsson Mob

Non verifiable packages promises with APT

Hi, I'm trying to create a package_method that is verifiable on all policies. But I keep getting messages like: - cf3 !! Unsatisfied constraints in promise (somepackage,*,*) - Package schedule execution ok for somepackage (outcome cannot be promised by cf-agent) - Here is my method:

RE: Is 'select_line_matching' broken?

I think that you shouldn't anchor the regexp... select_line_matching => "#!.*sh"; Have not tried it... :-P Best regards, Emil Assarsson emil.assars...@sonyericsson.com Phone: +46 (0)10 8017422 -Original Message- From: help-cfengine-boun...@cfengine.org [mailto:help-cfengine-boun...@c

RE: canonify promise_repaired

Doh. You did the canonify already. I would have expected it to work too. Best regards, Emil Assarsson emil.assars...@sonyericsson.com Phone: +46 (0)10 8017422 From: Assarsson, Emil Sent: tisdag den 16 mars 2010 10:13 To: 'Ingersoll, Robert'; nwat...@symcor.com Cc: help-cfengine@cf

RE: canonify promise_repaired

If you use $(this.promiser) you must make sure that the name of the promise is suitable as a classname. Take a look at this function: http://www.cfengine.org/manuals/cf3-reference.html#Function-canonify I guess there is some room for improvement of the documentation. Best regards, Emil Assarsso

RE: this.promiser with copy_from

Ok, great :-) I'm running 3.0.3patch1. Best regards, Emil Assarsson emil.assars...@sonyericsson.com Phone: +46 (0)10 8017422 -Original Message- From: d...@lonewolf.com [mailto:d...@lonewolf.com] On Behalf Of daniel.kl...@cfengine.com Sent: tisdag den 9 mars 2010 15:13 To: Assa

this.promiser with copy_from

Hi, Is there a reason why $(this.promiser) doesn't get expanded with copy_from? I have tried to use it as an argument to a body copy_from or inside the body... neither works. Bug or feature? Best regards Operational Services LUX Application Platforms within BI Enterprise Services Emil Assars

RE: Can't use host name regexps with trustkeysfrom

-Original Message- From: Mark Burgess [mailto:mark.burg...@iu.hio.no] Sent: torsdag den 4 mars 2010 12:25 To: Assarsson, Emil Cc: 'Neil Watson'; help-cfengine@cfengine.org Subject: Re: Can't use host name regexps with trustkeysfrom Emil, don't worry. We are thinking a

RE: Can't use host name regexps with trustkeysfrom

Should I change my bug reports to feature requests? Best regards, Emil Assarsson emil.assars...@sonyericsson.com Phone: +46 (0)10 8017422 -Original Message- From: help-cfengine-boun...@cfengine.org [mailto:help-cfengine-boun...@cfengine.org] On Behalf Of Neil Watson Sent: torsdag den 4 m

RE: Can't use host name regexps with trustkeysfrom

line. Best regards, Emil Assarsson emil.assars...@sonyericsson.com Phone: +46 (0)10 8017422 -Original Message- From: Mark Burgess [mailto:mark.burg...@iu.hio.no] Sent: onsdag den 3 mars 2010 22:28 To: Assarsson, Emil Cc: 'help-cfengine@cfengine.org' Subject: Re: Can't use h

RE: Can't use host name regexps with trustkeysfrom

Hi, FYI: I submitted 3 bug reports about this. Best regards, Emil Assarsson emil.assars...@sonyericsson.com Phone: +46 (0)10 8017422 -Original Message- From: Assarsson, Emil Sent: tisdag den 2 mars 2010 18:27 To: 'Mark Burgess' Cc: help-cfengine@cfengine.org Subject: RE: Can&

RE: Can't use host name regexps with trustkeysfrom

3 !!! System error for send: "Broken pipe" cf3 Challenge response from server asflx0007.domain.net/10.123.64.235 was incorrect! Best regards, Emil Assarsson emil.assars...@sonyericsson.com Phone: +46 (0)10 8017422 -Original Message- From: Mark Burgess [mailto:mark.burg...@

Can't use host name regexps with trustkeysfrom

Hi, It seems like I can't use hostnames with (for example) trustkeysfrom: body server control { trustkeysfrom => { '.*\.domain\.net' }; dynamicaddresses => { '10\..*'}; allowconnects => { '10\..*' }; hostnamekeys => "true"; } I get a "!! Authentication dialogue with cfserver.dom

hostnamekeys is true but server continues to save keys with ip

Hi, The hostnamekeys and dynamicaddresses confuses me a lot. Are not the server supposed to save the keys in files with hostname instead of IP addresses? More: the server seems to not accept Allowconnects => { ".*\.domain\.net" } Can this be related? I don't have any problem doing dns lookups a

RE: cfengine2, dhcp clients and keys

[mailto:mark.burg...@iu.hio.no] Sent: onsdag den 24 februari 2010 15:28 To: Assarsson, Emil Cc: 'help-cfengine@cfengine.org' Subject: Re: cfengine2, dhcp clients and keys Hej, http://www.cfengine.org/manuals/cf3-reference.html#dynamicaddresses-in-server http://www.cfengine.org/m

cfengine2, dhcp clients and keys

Hi, I'm starting to take a second look on CFengine after being on the Puppet track for some time. Is there any way to make cfengine to trust DNS PTR records instead of binding the key to the IP? We are using DHCP to supply IP addresses so the IP addresses are not useful. Best regards Operatio