Re: iterating over a global list

2012-09-11 Thread Seva Gluschenko
Gregory, Pay your attention to common bundles which are the only way to define global variables, i.e.: bundle common g { vars: ... } Meanwhile, there's no need to include common bundles into the bundlesequence. -- Best, Seva 2012/9/11 Gregory Matthews : > what is wrong here? > > body common

Re: Command execution environment

2011-10-08 Thread Seva Gluschenko
with ~ do what I > expect, other times not .. -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: combining contain bodies?

2011-10-07 Thread Seva Gluschenko
way .. > > Is it possible to provide multiple contain bodies to a command in any > way? Or do you just create custom combinations as needed (e.g. in_shell, > silent, in_shell_and_silent, etc) -- SY, Seva Gluschenko. ___ Help-cfengine mailing lis

Re: insert_lines content is in reverse order?

2011-09-21 Thread Seva Gluschenko
### to change back its content > ### Manually editing the file might lead CFEngine > ### This file is configured by CFEngine. > # > = > > Why? > > > _____

Re: CFEngine Help: how to convert vars to a class

2011-09-14 Thread Seva Gluschenko
>>>        bundlesequence => { "animal" }; >>> } >>> >>> bundle common g >>> { >>>       vars: >>> >>>               "temp"  string  =>      readfile("/tmp/test.txt", "4" ); >>> } >>> >>> bundle agent animal >>> { >>>       commands: "/bin/echo $(g.temp)"; >>>       commands: >>>                       "/bin/echo I have a pet dog." >>>                                ifvarclass => "$(g.temp)"; >>> } >>> [cfengine00  ~]# cf-agent -f ./test.cf >>> Q: ".../bin/echo DOG": DOG >>> I: Last 1 quoted lines were generated by promiser "/bin/echo DOG" >>> [cfengine00  ~]# >>> >>> Note the use of ifvarclass attribute to use a variable as a class; and >>> the full name of the variable (including the bundle name) in g.temp. >>> CFEngine bundles have scope, so you have to use the full name to call >>> a variable from another bundle (even a global variable). >>> >>> Yours, >>> -at >>> >>> >> >> > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: CFengine and Nagios Integration for Security Monitoring!

2011-09-14 Thread Seva Gluschenko
> > Any relevant documentation (paper/links), will be appreciated. > > Thanks n advance. > > Regards > > -Jan > > > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listi

Re: CFEngine Help: how to convert vars to a class

2011-09-13 Thread Seva Gluschenko
s: >>                       "/bin/echo I have a pet dog." >>                                ifvarclass => "$(g.temp)"; >> } >> [cfengine00  ~]# cf-agent -f ./test.cf >> Q: ".../bin/echo DOG": DOG >> I: Last 1 quoted lines were generated by promiser "/bin/echo DOG" >> [cfengine00  ~]# >> >> Note the use of ifvarclass attribute to use a variable as a class; and >> the full name of the variable (including the bundle name) in g.temp. >> CFEngine bundles have scope, so you have to use the full name to call >> a variable from another bundle (even a global variable). >> >> Yours, >> -at >> >> > > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: CFEngine Help:

2011-09-09 Thread Seva Gluschenko
te an empty file in master_location, I get a report.  When I > delete this same file, I do not get a report.  Is this a normal behavior?   > How do I make cfengine report when I delete the file? > > Regards, > j > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Reproducing authorization denials (Issue 498)

2011-07-26 Thread Seva Gluschenko
/26/2011 11:01 AM, Seva Gluschenko wrote: >> They should have disappeared after 3.1.5 when I'd discovered static >> buffer overrun in gethostname and Mark had put it under mutex. Can't >> tell exactly whether it was fixed in 3.1.5 or later, though. > > According to &

Re: Reproducing authorization denials (Issue 498)

2011-07-26 Thread Seva Gluschenko
lp-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: CFEngine Help: Variable Class Names

2011-07-19 Thread Seva Gluschenko
st > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Cfengine Help: Re: Making cf-runagent work

2011-07-19 Thread Seva Gluschenko
2011/7/19 Jerome Yanga : > Thank you, Seva. > > Are there any links that you can provide for cf-runagent and cf-serverd? > > Do developers see these messages? Or is there another thread that I should > forward this to? > > Regards, > j > > -----Origina

Re: Cfengine Help: Re: Making cf-runagent work

2011-07-18 Thread Seva Gluschenko
sr/local/sbin/cf-agent --inform > cf3>  -> Writing last-seen observations > cf3>  -> Last saw -MD5=81358344e2a8aa8b599950e58b097d2e (alias 192.168.1.10) > at Mon Jul 18 15:14:04 2011 >  (noexpiry 1.5 <= 168.0) > > Regards, > j > > -Original Message- > From: Sev

Re: Cfengine Help: Re: Making cf-runagent work

2011-07-18 Thread Seva Gluschenko
uot;192.168.1.10" }, >                maproot         => { "127.0.0.1" , "192.168.1.10" }; > >        roles: >                ".*" >                comment         => "provide access to root", >                authorize       =&

Re: Question about classes

2011-06-21 Thread Seva Gluschenko
I'm not sure if I've read you right, but if you mean that or => "" works and or => {} doesn't, perhaps, it's high time to file a bug report about that, because it must be strictly the opposite. 2011/6/21 Bas van der Vlies : > > On 21 jun 2011, at 1

Re: Question about classes

2011-06-21 Thread Seva Gluschenko
van der Vlies wrote: >> >> On 17 jun 2011, at 15:07, Seva Gluschenko wrote: >> >>> I'd rather rewrote it as follows: > > I have done some experiments and was a bit surprise over the outcome, maybe > some can explain to me why some work and others not: >  *

Re: Question about classes

2011-06-17 Thread Seva Gluschenko
;); >        'PBS_MOM' expression => "!PBS_dom.PBS_reg.${sys.host}" > > Of course, the ability to nest the various and{}, or{}, not{}, xor{} > expressions would be nice. > > Alternately, implement a "not()" function, independent of the "not{}&qu

Re: Cfengine Help: Updating shadow encrypted fields

2011-06-15 Thread Seva Gluschenko
you can >> strictly define which client has access to any given resource. > > Yes, this is also true. IP-based or DNS-based. If this is unreliable, you > are pretty much stuck with nothing. > > Best regards, > Boleslaw Tokarski > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Cfengine Help: Updating shadow encrypted fields

2011-06-15 Thread Seva Gluschenko
u >> be willing to share?  I am not sure how to do this - It must be done only >> once, and since the encrypted string will be different on each host, you >> can't check for a static value that has been replaced on subsequent cf-agent >> runs.  Wha

Re: How to do implicit looping over an slist defined in a common bundle?

2011-05-28 Thread Seva Gluschenko
quot;myusers"  slist => { "joe", "mary", "ann" }; > > } > > > bundle agent runme > > { > vars: "mylist" slist => { @(g.myusers) }; > > reports: > linux:: >  "$(g.crontab)"; >  "$(g.myusers)

Re: How to do implicit looping over an slist defined in a common bundle?

2011-05-28 Thread Seva Gluschenko
; > { > reports: > linux:: >  "$(g.crontab)"; >  "$(g.myusers)"; > } > > > [cfengine00  ~]# cf-agent -f ./test.cf > R: /var/spool/cron/crontabs/root > R: $(g.myusers) > [cfengine00  ~]# > &g

Re: Cfengine Help: Re: conditional import of inputs -- i.e. using classes to control inputs

2011-05-20 Thread Seva Gluschenko
luated anyway), but I get: > > Can't stat file "./@(g.country)" for parsing > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. _

Re: Need an example of a policy that reacts to environmental data collected by cf-monitord

2011-05-15 Thread Seva Gluschenko
I still need an example of how Cfengine could react to environmental data. > > > Any suggestions, please? > > Aleksey > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/

Re: how to use process_select?

2011-05-12 Thread Seva Gluschenko
cess_select  => >      proc_finder("$(suspicious_process_names)"); > } > > > > > body process_select proc_finder(pattern) > > { >     command => ".*$(pattern).*"; > >     process_result => "c

Re: How to execute subshell within shell command?

2011-04-18 Thread Seva Gluschenko
netstat -r|/usr/bin/grep default|/usr/bin/awk '{print $2}'` >  -> Executing '/usr/sbin/route add default `/usr/bin/cat > /etc/defaultrouter` 1' ...(timeout=-678,owner=-1,group=-1) >  !! Finished command related to promiser "/usr/sbin/route add default > `/usr/bin/cat /etc/defaultrouter` 1" -- an error occurred (returned 1) > Q: "...sbin/route add ": route: /usr/bin/cat /etc/defaultrouter: unexpected > '/' > I: Last 1 quoted lines were generated by promiser "/usr/sbin/route add > default `/usr/bin/cat /etc/defaultrouter` 1" >  -> Completed execution of /usr/sbin/route add default `/usr/bin/cat > /etc/defaultrouter` 1 > R: xyz_defaultrouter: updated default router > z > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: program cf-promises

2011-03-31 Thread Seva Gluschenko
Can't you just define soft class like cf-promises -D monitor ? 2011/3/31 Bas van der Vlies : > On 30-03-11 21:38, Seva Gluschenko wrote: >> >> Perhaps, because it doesn't make much sense, since cf-promises only >> verifies files and exits, taking no actions. >&

Re: program cf-promises

2011-03-30 Thread Seva Gluschenko
nt > cf-serverd --> server > cf-execd --> executor > > But cf-promises not. My question is why? > > > -- > Bas van der Vlies > b...@sara.nl > > > > ___ > Help-cfengine mailing list > Help-cfengine@cfengin

Re: edit_files: delete_line and insert_lines sometimes give different results in static environment

2011-03-15 Thread Seva Gluschenko
" might, in some > circumstances, need to be read as "essential".) > > Anyway, thanks for the attention and replies. > > -- > David Lee > > > Mark Burgess wrote: >> Thanks for reminding me about this. I was sure this had already been done. &

Re: edit_files: delete_line and insert_lines sometimes give different results in static environment

2011-03-15 Thread Seva Gluschenko
It had been done already for empty_file_before_editing => "true", indeed. It only needs to be broaden to file editing at whole. 2011/3/15 Mark Burgess : > > Thanks for reminding me about this. I was sure this had already been done. > > On 03/14/2011 09:05 PM, Seva G

Re: edit_files: delete_line and insert_lines sometimes give different results in static environment

2011-03-14 Thread Seva Gluschenko
let me known its status, please. > > > -- > : David Lee > : ECMWF (Data Handling System) > : Shinfield Park > : Reading  RG2 9AX > : Berkshire > : > : tel:    +44-118-9499 362 > : email:  david@ecmwf.int > ___

Re: Complicated process matching

2011-03-11 Thread Seva Gluschenko
pache if it isn't running"; > > } > > > body process_count httpd_stragglers { >      match_range => "1,2"; >      in_range_define => { 'httpd_stragglers' }; > } > > body process_select apache_user { >      process_owner => { 'root', 'www', 'apache' }; >      process_result => "process_owner"; > } > > > <snip> > > -- > Jesse Becker > NHGRI Linux support (Digicon Contractor) > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: what does "timeout=-678, owner=-1, group=-1" mean when running a command?

2011-03-11 Thread Seva Gluschenko
ser/cfengine_ec2/servers/web' > ...(timeout=-678,owner=-1,group=-1) > > Best, > Aleksey > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. _

Re: Cfengine Help: Re: cfengine3 processes

2011-03-10 Thread Seva Gluschenko
;> yet been implemented on Unix at all (since one has a perfectly good >> processes abstraction). The error message as such is misleading, since >> it is the Windows version of Cfengine which is Nova only. I expect you >> find that more acceptable. >> >> Mark > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Cfengine Help: can not execute a user-only and non-root executable

2011-03-10 Thread Seva Gluschenko
;s a normal behaviour of cfengine ? Is there a better way >> to execute a file with such rights ? > > commands: >   "/sbin/su" >     args => "-c '/usr/sbin/inetd -c' bin" > > or something similar. > > -- > Mikhail Gusarov >

Re: Global vars issue

2011-03-08 Thread Seva Gluschenko
__ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Cfengine Help: .cf file includes?

2011-02-16 Thread Seva Gluschenko
name failsafe.cf","noshell"); > "cflist" slist => splitstring($(currentcf),"\n","50"); > } > body common control { > inputs => { > @(global.cflist) > }; > } > > -- > Bas van der Vlies > b...@sara.nl > > > >

Re: Urget help!!

2011-02-10 Thread Seva Gluschenko
gt; > > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Bug when copying a file and changing perms

2011-02-01 Thread Seva Gluschenko
nce constraints on >> /srv/net.kameleoon/hudson/plugins/text-finder.hpi >> community>  -> Owner of >> /srv/net.kameleoon/hudson/plugins/text-finder.hpi was 0, setting to >> 265 >> community>  -> Group of >> /srv/net.kameleoon/hudson/plugins/t

Re: Cfengine Help: Re: importing tasks based on host group

2011-01-31 Thread Seva Gluschenko
           "isp_jdk", >>>                                "isp_tomcat", >>>                                "isp_envs", >>>                                "isp_templates", >>>                                "isp_services" >>>                              }; >>> >>>  "dist_ftp_seq" slist    =>  { >>>                                "dist_ftp_pkgs", >>>                                "dist_ftp_conf" >>>                              }; >>> >>> methods: >>> >>>  isp02|isp03:: >>>    "any" usebundle     =>    "$(isp_seq)"; >>> >>>  ftp01:: >>>    "any" usebundle     =>    "$(dist_ftp_seq)"; >>> >>>  oracle_servers:: >>>    "any" usebundle     =>    "tnsnames"; >>> } >>> >>> ### >>> >>> >>> >>> Each policy file is imported on every host but not every bundle is >>> executed. The 'machine_specific' bundle listed in the bundlesequence is run >>> with the specific purpose of executing additional bundles as needed. >>> >>> Its certainly a little less straightforward than using import in v2, but >>> it works!  I hope this helps you. >>> >>> ___ >>> Help-cfengine mailing list >>> Help-cfengine@cfengine.org >>> https://cfengine.org/mailman/listinfo/help-cfengine >> > > > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Cfengine Help: Re: cf file not parsed

2011-01-25 Thread Seva Gluschenko
se log of cf-agent? >> >> Cheers, >> --Nakarin >> >> ___ >> Help-cfengine mailing list >> Help-cfengine@cfengine.org >> https://cfengine.org/mailman/listinfo/help-cfengine >

Re: 3.1.2 cf-serverd dumps core, debug output attached.

2011-01-19 Thread Seva Gluschenko
> Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Cf-agent holding open hundreds of network sockets open

2011-01-19 Thread Seva Gluschenko
41914 > peername: AF_INET 172.17.137.174  port: 5308 >  759: S_IFSOCK mode:0666 dev:293,0 ino:17601 uid:0 gid:0 size:0 >   O_RDWR > SOCK_STREAM > SO_SNDBUF(49152),SO_RCVBUF(49640),IP_NEXTHOP(232.193.0.0) > sockname: AF_INET 172.17.130.245  port: 41915 > peername: AF_INET 172.17.137.73  port: 5308 >  760: S_IFSOCK mode:0666 dev:293,0 ino:44388 uid:0 gid:0 size:0 >   O_RDWR > SOCK_STREAM > SO_SNDBUF(49152),SO_RCVBUF(49640),IP_NEXTHOP(232.193.0.0) > sockname: AF_INET 172.17.130.245  port: 41916 > peername: AF_INET 172.17.138.159  port: 5308 > > > > Anyways, is there a way to instruct cf-agent to close the socket when the > copy_from is complete, or does anyone else have a better approach for what I > am trying to accomplish? > > Thanks > Mike > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Cisco configuration with cfengine

2011-01-13 Thread Seva Gluschenko
_ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Flip-flopping file properties

2010-12-22 Thread Seva Gluschenko
ssion 644, changed it to 600 >  -> Object /.rhosts had permission 600, changed it to 644 > r...@nrsscdev01:master$ /var/cfengine/bin/cf-agent -KIf ./tester.cf >  -> Object /.rhosts had permission 644, changed it to 600 >  -> Object /.rhosts had permission 600, changed it to 644 >

Re: Cf-runagent

2010-12-22 Thread Seva Gluschenko
; But later when run again the same command, it just not running anymore > without any error. Is there any timeout after running cf-runagent? > Thanks -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: clever array and slist usage?

2010-12-18 Thread Seva Gluschenko
t;${pkgs[${sys.uqhost}]}" is evaluated once, with >> only "${sys.uqhost}" getting processed, leaving the string as a literal >> "${pkgs[alpha]}" ).  This will, of course, fail when passed to the >> actual promise in question. >> >> I do have a workaround, but it's inelegant.  Bascial

Re: clever array and slist usage?

2010-12-18 Thread Seva Gluschenko
alpha:: "pkgs" slist => { ... }; But I cannot guarantee that every single case can be solved that easy. 2010/12/18 Jesse Becker : > Yeah, I found a post (from you, I think) from a few months back that > said as much.  Any ideas for more elegant workarounds? >

Re: clever array and slist usage?

2010-12-17 Thread Seva Gluschenko
atten the > array into multiple slists, and have a separate promise for each one, > based on the hostnames. > > So my question:  Is there a concise way to do something like what I've > posted above? > > > -- > Jesse Becker > NHGRI Linux support (Digicon Contractor) > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Directing cfengine to an IP:Port (like bindtointerface?)

2010-12-16 Thread Seva Gluschenko
234:4567" > > Then when the packet reached the VPN-GW on port 4567, it's NAT protocol > would direct those packets to targethost_es_net which is *inside* the VPN. > > I hope this makes it more clear what I'm trying to do. > > Thanks, > > deb > >

Re: Directing cfengine to an IP:Port (like bindtointerface?)

2010-12-15 Thread Seva Gluschenko
s Engineer       Berkeley, CA 94720 > > > _______ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Cfengine Help: Re: edit_lines convergence

2010-12-09 Thread Seva Gluschenko
v+ > /usr/sbin/cf-agent -K > R: I replace some missconfigured smtp_host line > #v- > > I'll look at the code when I'll have time. > > Thanks. > -- > Daniel Dehennin > Récupérer ma clef GPG: > gpg --keyserver pgp.mit.edu --recv-keys 0x6A2540D1 > > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Just a remark/question about methods any usebundle

2010-12-09 Thread Seva Gluschenko
*** > *  Bas van der Vlies                    e-mail: b...@sara.nl       * > *  SARA - Academic Computing Services   Amsterdam, The Netherlands * > > _______ > Help-cfengine mailing list > Help-cfengine@cfengine.or

Re: Does cfagent download the policy even if it hasn't changed?

2010-12-08 Thread Seva Gluschenko
> Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Set class on file changes

2010-12-02 Thread Seva Gluschenko
*Simon Oxwell*** > > *ControlCircle*** > > *Senior Server Engineer*** > > *The Datacentre People*** > > 0044 (0)20 7517 6594 > > Hertsmere House, 2 Hertsmere Road, > > simon.oxw...@controlcircle.com > > London, E14 4AB &

Re: field_edit and duplication

2010-12-02 Thread Seva Gluschenko
made by: > ^.*\s+/scratch\s+.*(usrquota,grpquota,usrquota,grpquota,?)+.*$ > cf3 > cf3     Comment:  Remove duplicate urgquota,grpquota entries > cf3     . > cf3 > cf3  -> This promise has already been verified >

Re: Cfengine Help: cf-execd: is daemon or cron better?

2010-12-01 Thread Seva Gluschenko
of the dev team would share any insight they have I'd be >>> especially glad to hear from them. >> >> >> I run cf-execd as daemon. This runs cf-agent and this checks if cron is >> running.  Also use  cron to check if cf-execd is still runing. >> >> --

Re: Array member

2010-11-29 Thread Seva Gluschenko
in/echo $(arr": $(array[0]) > I: Last 1 QUOTed lines were generated by promiser "/bin/echo $(array[0])" > > > > It alwas pritns $(array[0]). > > Please help. > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Cfengine Help: Re: what if cf-runagent could be able to call just one bundle from the bundlesequence?

2010-11-27 Thread Seva Gluschenko
nk of any cases where calling a single bundle >> might cause problem? >> >> ___ >> Help-cfengine mailing list >> Help-cfengine@cfengine.org >> https://cfengine.org/mailman/listinfo/help-cfengine &g

Re: Problem with ifvarclass and policy

2010-11-26 Thread Seva Gluschenko
ss exists and I need to use ifvarclass > because the names of the classes are not fixed (they also depend > on variables).  Then I gather all the existing lists (hence the > ifdefined policy) in another list. > > Still using Cfengine community editi

Re: Cfengine Help: Re: "Duplicate selection of value for variable ..." messages

2010-11-25 Thread Seva Gluschenko
a scalar type, > near token '@{bar}"' > > I don't understand why @{bar} is considered a scalar. > > Thanks for any clarification. > > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Cfengine Help: Re: if_repaired

2010-11-25 Thread Seva Gluschenko
code two separate promises rather than `overloading' a single one. > > > Could it be that the permissions are correct and, therefore, the promise is > being flagged as "kept" rather than "repaired"? > > ____

Re: Cfengine Help: Apply a bundle to the content of a given path

2010-11-25 Thread Seva Gluschenko
     usebundle => expired_x509files("/path/to/certs/.*"); > } > > > Note that I do not know a priori what the content of the path is. Could > anyone shed some light on this? > > Thanks in advance, > Pablo. > > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: if_repaired

2010-11-24 Thread Seva Gluschenko
should break it > into two promises - one to check and set restart_class, another to > send the signal if the sshd_config has been changed. > > This may be why it didnt work - it may also have something to do with > your process_select body - you should show that aswell. >

Re: if_repaired

2010-11-24 Thread Seva Gluschenko
    => { "hup" }, >             process_select => listening_sshd, >             restart_class => "restart_sshd"; > > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: body executor control and separately defined classes

2010-11-19 Thread Seva Gluschenko
uot;if_elapsed"? >> >> Chris Ritson (Computing Officer and School Safety Officer) >> >> Room 707, Claremont Tower,        EMAIL: c.r.rit...@ncl.ac.uk >> School of Computing Science,      PHONE: +44 191 222 8175 >> Newcastle University,  

Re: body executor control and separately defined classes

2010-11-19 Thread Seva Gluschenko
 WEB  : http://www.cs.ncl.ac.uk/ > > > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: boolean constraint classes did not match internals

2010-11-18 Thread Seva Gluschenko
ommon.version > Searching for scope context control_common > Found scope reference control_common > GetVariable(control_common,version): using scope 'control_common' for > variable 'version' > return final variable type=string, value={ > 0.2.0} > > > On 11

Re: boolean constraint classes did not match internals

2010-11-18 Thread Seva Gluschenko
gt; > Sandra > > On 11/18/2010 10:50 AM, Seva Gluschenko wrote: >> >> Sandra, >> >> did you run it with -v switch? It produces somehow noisy but portions >> useful output. What version of Cfengine are you using, btw? Which OS? >> >> 2010/11/18

Re: boolean constraint classes did not match internals

2010-11-18 Thread Seva Gluschenko
gt; standard; > } > > body contain standard > { >     exec_owner => "root"; > } > > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: create file if non-existant

2010-11-16 Thread Seva Gluschenko
> would like cfengine to seed a file but not modify it again afterwards. > > I suppose I'm looking for some kind of conditional that might help. > > Thanks, > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > htt

Re: vars defined in agent bundles not usable?

2010-11-16 Thread Seva Gluschenko
>> force_ipv4   => "false"; >> copy_size        => irange("0","5"); >> trustkey    => "true"; >> encrypt     => "true"; >> verify      => "true"; >> #purge       => "false"; >> purge       => "true"; >> #findertype  => "MacOSX"; >> } >> # - Sample End --- >> >> Running in debug 1 I see this: >> >> Matched syntatically correct bundle (lval,rval) item = (perms) to its rval >> Constraint syntax ok, but definition of body is elsewhere perms=s >> Prepending scalar to rval-list [system] >> CopyRvalItem(s) >>   Appending Constraint: perms => system >> Recorded LVAL copy_from >> Found function identifier mycopy >> Start FnCall mycopy args level 1 >> Appending scalar to rval-list [ $(master_server)/somesample.txt] >> CopyRvalItem(s) >> Appending scalar to rval-list [$(master_server)] >> CopyRvalItem(s) >> End args level 1 >> Installing Function Call mycopy >> Installed mycopy( $(master_server)/somesample.txt,$(master_server),) >> om,) >> >> Running the server binary manually in foreground and with verbose I >> also only see this connection when I don't use variables. >> > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: When i process is killed. I want to see the whole process line instead of only pid.

2010-11-16 Thread Seva Gluschenko
/16 Bas van der Vlies : > On 16-11-10 11:54, Seva Gluschenko wrote: >> >> Bas :) >> >> just remove action modifier. Warning action means do nothing, just >> warn. If you remove the modifier, both warning and signal will be >> produced. >> > >

Re: restart_class

2010-11-16 Thread Seva Gluschenko
sses from earlier bundles. > > Can anyone else confirm this...and which is correct? Refguide or > observed behavior? > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfeng

Re: When i process is killed. I want to see the whole process line instead of only pid.

2010-11-16 Thread Seva Gluschenko
much resources > }}} > > Maybe a new action_policy: fixandwarn. > > > -- > > *  Bas van der Vlies                    e-mail: b...@sara.nl       * > *  SARA - Academic Computing Services   Amsterdam, The Netherlands * > > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: How pass a variable to process_select for process_owner

2010-11-15 Thread Seva Gluschenko
in(x, exclude_users) > { >        #process_owner  => { "root", "ganglia", "daemon", "postfix", "nslcd", > "ntp" }; >        #command        => ".*"; >        process_owner  => { "@(exclude_users)  }; >        ttime_range    =&

Re: Maybe a bug in parser with parsing reports

2010-11-11 Thread Seva Gluschenko
Sorry, I was unattentional. 2010/11/11 Bas van der Vlies : > On 11-11-10 12:05, Seva Gluschenko wrote: >> >> Bas, >> >> go use other hard class like debian and don't try to use any in >> reports ). It's Mark's way to implement the "The compile

Re: Maybe a bug in parser with parsing reports

2010-11-11 Thread Seva Gluschenko
gt; > regards > > PS) It is silly to fail on any:: section. I can also use other hard classes > eg: debian with the same effect. > -- > > *  Bas van der Vlies                    e-mail: b...@sara.nl       * > *  SARA - Academ

Re: verify service running

2010-11-10 Thread Seva Gluschenko
; > contain => in_shell; > > > } > > --- end cfengine config > > note:  i tried using "pkill -HUP haproxy" orriginally but this didn't > seem to work...  I have to > research what haproxy does when it gets SIGHUP.  in this example, I > stop and start > the proxy.  normally, I'd expect pkill -HUP to be sufficient to reload > the config. > > > Hope this helps! > Best, > -at > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: "was not able to copy file" - critical corruption during cf-agentrun

2010-11-09 Thread Seva Gluschenko
le went missing. > > The last promise is below.  It's just a simple file copy as was the prior > promise. > >    "/etc/security/limits.conf" >     copy_from => > mycopy("${g.masterfiles}/farm/etc/secu

Re: "was not able to copy file" - critical corruption during cf-agentrun

2010-11-09 Thread Seva Gluschenko
ould seem bad to me and get reported as a bug.  The kill >> -9 (hard stop) vs. kill -15 (graceful shutdown) thing is not cfengine >> specific, it's how many UNIX programs work.  If signal 15's can cause >> corruption, it may very well catch people off guard. >> &g

Re: "was not able to copy file" - critical corruption during cf-agent run

2010-11-09 Thread Seva Gluschenko
ncies related to the way Cfengine prior to 3.1 handles text blocks, but I've never seen file damage of that kind you wrote about. 2010/11/9 Frans Lawaetz : > > On 11/09/2010 05:46 AM, Seva Gluschenko wrote: >> No, definitely. A file isn't installed in place of older one unti

Re: cf-runagent question

2010-11-09 Thread Seva Gluschenko
hough. 2010/11/9 Bas van der Vlies : > > On 9 nov 2010, at 11:50, Seva Gluschenko wrote: > >> From my experience, cf-runagent is best invoked with -H. I >> tried -s and it failed, AFAIR. >> > Thanks for the info.  we have a lot of hosts so -H is not an option. I will &g

Re: cf-runagent question

2010-11-09 Thread Seva Gluschenko
.nl > > > > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: "was not able to copy file" - critical corruption during cf-agent run

2010-11-09 Thread Seva Gluschenko
No, definitely. A file isn't installed in place of older one until it's copied succefully. 2010/11/9 Bas van der Vlies : > > On 9 nov 2010, at 10:53, Seva Gluschenko wrote: > >> Well, Cfengine reports in deed that a file was corrupted in transfer. >> It doesn't

Re: "was not able to copy file" - critical corruption during cf-agent run

2010-11-09 Thread Seva Gluschenko
t; during a copy.  to my knowledge this should not happen when > > On 9 nov 2010, at 10:22, Seva Gluschenko wrote: > >> Of course, Cfengine3 acts the same way, file never gets installed >> directly in place of an older file. >> > > Maybe i am misreading the info. But

Re: "was not able to copy file" - critical corruption during cf-agent run

2010-11-09 Thread Seva Gluschenko
Of course, Cfengine3 acts the same way, file never gets installed directly in place of an older file. 2010/11/9 Bas van der Vlies : > > On 9 nov 2010, at 08:37, Seva Gluschenko wrote: > >> Frans, >> >> since you're terminating cf-serverd in the middle of a file

Re: "was not able to copy file" - critical corruption during cf-agent run

2010-11-08 Thread Seva Gluschenko
> > The client is running cfengine3-community 3.0.5 and the master is running > 3.1.0b2.  Both are on CentOS5.5 x86_64. > > Thanks, > Frans > > > > > > > > > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: normal ordering

2010-11-08 Thread Seva Gluschenko
> > It seems strange that files should come well before packages, as a > package might provide a file required during a files promise, even > more so as the ref guide says they shouldn't.  Do classes and things > like ifvarclass change the normal ordering? > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Yum Package problem in CF3

2010-11-05 Thread Seva Gluschenko
this point whether the problem lies with > yum, if it's a cfengine bug, or if we're missing something in the rules. Any > advice, thoughts, help, etc. would be highly appreciated, especially since > this looks like it could be a deal breaker for getting cfengine 3 up in ou

Re: Cfengine Help: Re: Bundle and Body

2010-11-02 Thread Seva Gluschenko
AIL: c.r.rit...@ncl.ac.uk > School of Computing Science,      PHONE: +44 191 222 8175 > Newcastle University,             FAX  : +44 191 222 8232 > Newcastle upon Tyne, UK NE1 7RU.  WEB  : http://www.cs.ncl.ac.uk/ > > > ___ > Help-cfengine

Re: How to remove packages not explicity whitelisted?

2010-10-27 Thread Seva Gluschenko
27;m asking about (b). > > Best, > -at > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. _

Re: how to redirect to /dev/null

2010-10-26 Thread Seva Gluschenko
> /etc/release", "noshell"); >> >>  Is there a way to redirect grep output to /dev/null? >> >> Thanks, Jim >> ___ >> Help-cfengine mailing list >> Help-cfengine@cfengine.org >> https://cfeng

Re: how to redirect to /dev/null

2010-10-26 Thread Seva Gluschenko
> https://cfengine.org/mailman/listinfo/help-cfengine > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Cfengine Help: variable expansion inside a single bundle

2010-10-21 Thread Seva Gluschenko
s?? >> (Yes it's the only one that doesn't work... for all other variables it works >> like a charme) >> >> TIA >> >> Bernhard >> >> ___ >> Help-cfengine mailing list >> Help-cfengine@cfengine.org >> https://cfengine.org/mailman/listinfo/help-cfengine > > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Using a variable in package_method

2010-10-20 Thread Seva Gluschenko
              classes           => if_ok("software_ok"); > } > > -- > > *  Bas van der Vlies                    e-mail: b...@sara.nl       * > *  SARA - Academic Computing Services

Re: Help on classes

2010-10-05 Thread Seva Gluschenko
fengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Promises being ignore!!!

2010-10-04 Thread Seva Gluschenko
you with much more details about promises run. -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Re: Package installation fails but cfengine sees it as ok

2010-09-17 Thread Seva Gluschenko
Davide, your understanding is wrong, since Cfengine runs every bundle 3 times to achieve convergence, so the config file will be downloaded in the same cf-agent run once the desired package is installed and class is set. 2010/9/17 Davide Brini : > On Friday 17 Sep 2010 10:27:06 Seva Glusche

Re: Package installation fails but cfengine sees it as ok

2010-09-17 Thread Seva Gluschenko
s me from wasting CPU and time for unnecessary package manager invocation when a package is already installed. 2010/9/17 Mark Burgess : > > > On 09/17/2010 11:09 AM, Davide Brini wrote: >> On Friday 17 Sep 2010 09:59:10 Seva Gluschenko wrote: >> >>> Davide, >>>

Re: Package installation fails but cfengine sees it as ok

2010-09-17 Thread Seva Gluschenko
> Is this expected behavior? > > -- > D. > ___ > Help-cfengine mailing list > Help-cfengine@cfengine.org > https://cfengine.org/mailman/listinfo/help-cfengine > -- SY, Seva Gluschenko. ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

  1   2   >