Re: OS patch management -- how to deploy the same patch set to production as you did to testing 3 weeks ago? (How to "take a snapshot" of an OS patch set)

2011-09-21 Thread Tom Tucker
My company uses the RedHat Satellite server line to achieve this functionality. Obviously this tool comes at cost, maybe you could leverage the SpaceWalk app to provide similar capabilities. We essentially freeze the latest RHEL x.y version to three different software channels. The channels we cre

System error for readlink

2011-09-12 Thread Tom Tucker
Hello. I would appreciate any insight you might have regarding my readlink problem. I am puzzled by the sporadic nature of these errors since I have been using this format for months with no problems. Below is a sample of the logs messages seen and a condensed promise example. Assuming I have a

Security Tools and Root Access

2011-08-12 Thread Tom Tucker
Please pardon the non-Cfengine related questions. The Cfengine community has been a good source of unix related information in the past. Hopefully they can help me with my current unix related delimma. My company has recently purchased a new security tool. For this tool to operate at maximum ef

Key Issues Running Standalone Promise

2011-06-12 Thread Tom Tucker
In the below example, I have two policy servers one in Atlanta and another in Dallas and my clients have keys for both policy servers. If I run this promise manually I get key errors (shown below), however if I add the "packages_update" to the promises.cf file it works just fine. What am I missing?

Re: monitoring cfengine

2011-04-22 Thread Tom Tucker
I monitor my cfengine systems in a couple of different ways. 1) Nagios port 5308 check to the policy servers 2) Nagios NRPE check_file_age to ensure the clients are updating properly (see below) 3) Hourly cf-servd status check/fix Nagios NRPE check_file_age check #

maxconnections Formula (server side)

2011-03-13 Thread Tom Tucker
Good evening. Pardon me if this is already covered in the documentation. I am looking for a recommend value or a formula to determine an appropriate value for the maxconnections setting based on the number of clients and splaytime. Thank you http://www.cfengine.org/manuals/cf3-reference.html#m

Re: Cfengine Help: lastseen db not updating

2011-03-11 Thread Tom Tucker
Sorry for the noise. My lastseen problems were caused by duplicate clients keys. On Fri, Mar 11, 2011 at 2:51 PM, Frans Lawaetz wrote: > > > On Fri, Mar 11, 2011 at 2:44 PM, Mark Burgess wrote: > >> >> Do you replicate the cfengine key between multiple hosts? I had a >> discussion about this ear

Re: Cfengine Help: lastseen db not updating

2011-03-11 Thread Tom Tucker
Any updates on this issue? I am experiencing the same problem on a RHEL 5.3 host running 3.1.2. On Thu, Jan 13, 2011 at 11:42 AM, Frans Lawaetz wrote: > > > This morning my lastseen report (c3.0.5p1) showed that all clients had > not checked in for a least 40 hours. The clients are running, I c

Re: Any comments?

2011-03-02 Thread Tom Tucker
For those who responded publicly and privately, thanks. Your responses to this somewhat off topic item was appreciated. On Wed, Mar 2, 2011 at 4:23 PM, Aleksey Tsalolikhin wrote: > Hey, Tom. I talked to a fellow who used to consult on (IBM) Tivoli setups, > and > knows it quite well. I aske

Any comments?

2011-03-01 Thread Tom Tucker
I have been through several presentations with BMC, HP and others and how their suite of tools can replace our current system provisioning and configuration management tools. They made some very big claims how they can provide the same functionality and also integrate with other vendors (VMware, Ci

Updating a symlink

2011-02-19 Thread Tom Tucker
I would appreciate some assistance on how to update a pre-existing symlink. If "/xyz -> /old/path" exists then delete it and replace/add "/xyz -> /new/path". It sounds like the "issymlinkto" function would be needed, but I'm unsure how to use it. Thank you for your time and assistance ___

Random Selection from an Array/List

2010-12-29 Thread Tom Tucker
Is it possible to randomly select one policy server from a list, array or whatever to interact with during a particular execution/run? Using the below configuration, my clients equally interact with BOTH policy servers (192.168.22.103 and 22.233). Since the policy servers are identifical their is

Re: Cfengine Help: Re: Reloading cf-execd after cf-execd.cf changes

2010-12-26 Thread Tom Tucker
Should I consider running my Linux cf-execd process from cron instead of Linux services to side step this issue? Granted the cf-execd.cf is one of those infrequently modified files, but having to kill and restart sounds undesirable to me. On Mon, Oct 18, 2010 at 11:58 AM, wrote: > Forum: Cfengin

Transmission refused or failed statting...

2010-12-20 Thread Tom Tucker
At various times, the /var/cfengine/inputs directory on my Linux policy servers will be wiped out. Any thoughts on where I should look next for a possible cause. Below is the /var/log/messages from these systems. Policy Server Info ### Red Hat Enterprise Linux Server release 5.3 (Tik

Two Policy Server Configuration

2010-11-18 Thread Tom Tucker
I am testing two policy servers in a redundant configuration. The goal is to simulate a distributed policy server configuration using SVN the content source. My promises.cf file contains an input entry of "cfservd.conf", without this line my cf-serverd process will not contain the access related

Multiple Policy Servers

2010-06-11 Thread Tom Tucker
I see we can define multiple policy servers, but can we dictate which server(s) clients communicate with? For example, if you had firewalled off lab environment. I understand the clients would loop through each server defined until it succeeds. It seems like it would be more efficient in this di

Solaris 10 init Scripts

2010-06-09 Thread Tom Tucker
Hello. Does anyone have a Solaris 10 init scripts for a cfengine 3 client they don't mind sharing? Thank you ___ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine

Command execution if directory doesn't exist

2010-06-02 Thread Tom Tucker
I am trying to write a promise config that will first check to see if a directory exists. If it doesn't the run these commands. I am able to achieve this with files incombination with the "classes => if_repaired(xyz);". Any suggestions? Thank you, CFengine 3 files: # directory example

Various Policy Server Questions

2010-05-24 Thread Tom Tucker
I have been testing CFengine 3 successfully for the past month and I'm now trying to re-scale my configuration to properly support my work environment. My company has approximately 3,000 devices spanning three data centers that is segregted into production, dev, qa, and lab environments. I would

Re: Cfengine Help: Re: Write to files - Problem with Examples

2010-04-29 Thread Tom Tucker
Thanks Neil. I switches it from "insert.lines" to "lines" with the following results. # cat /tmp/test_insert @(lines) /var/log/messages Apr 29 23:24:17 usg-admin9902 cf3[12946]: List parameter "lines" not found while constructing scope "append_if_no_line" - use @(scope.variable) in calling ref