Re: Cf-runagent

2010-12-22 Thread Seva Gluschenko
Hi, you'd better direct such questions to help-cfengine@cfengine.org since I'm not Cfengine authority. It's not cfrunagent feature but cf-agent feature which doesn't recheck for promises within given interval (defaults to 1 minute). To force immediate execution, add -K to cf-agent invocation strin

Re: Cf-runagent

2010-12-22 Thread Mark Burgess
There is a customary "ifelapsed" time for runagent on the server side to protect against DOS (even self-inflicted) etc. On 12/22/2010 09:50 AM, Seva Gluschenko wrote: > Hi, > > you'd better direct such questions to help-cfengine@cfengine.org since > I'm not Cfengine authority. It's not cfrunagen

reports: "Not sure I understand" LastSeen

2010-12-22 Thread Nick Anderson
I was reading 6.3.3 in the cfengine3 reference manual tonight. I am not sure I fully understand how it works. Is it reporting that the executing host hasn't talked with the policyserver in x days? Is it intended to be executed on the policyserver and report that host x hasn't checked in for so man

Flip-flopping file properties

2010-12-22 Thread Erlend Leganger
After upgrading from cf v3.0.2 to v3.1.2, my simple file copying promises cannot set proper perms for files any more. Or to be more precise - the correct file access is set and then immediately reset again. This flip-flopping forces all my file copying policies to kick in every time cfengine runs a

Re: Flip-flopping file properties

2010-12-22 Thread Seva Gluschenko
Erlend, look at the following line in your body copy_from: preserve => "true"; it directs Cfengine to preserve file permissions taken from source. Your source file obviously has permissiions 644. 2010/12/22 Erlend Leganger : > After upgrading from cf v3.0.2 to v3.1.2, my simple file copying > p

Re: Flip-flopping file properties

2010-12-22 Thread Erlend Leganger
Great, thanks!. The preserve => "true" setting must not have worked in 3.0.6, so when I upgraded, my mistake took effect. - Erlend On 22 December 2010 11:56, Seva Gluschenko wrote: > Erlend, > > look at the following line in your body copy_from: > > preserve => "true"; > > it directs Cfengine to

Cfengine Help: cf_lock.db gets bigger and bigger

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: cf_lock.db gets bigger and bigger Author: Lars.O Link to topic: https://cfengine.com/forum/read.php?3,19875,19875#msg-19875 Has anyone else seen that the size of /var/cfengine/state/cf_lock.db increases? We are using community version 3.1.2 with BerkleyDB 4.1.25 and 4

Cfengine Help: [SMTP] How to specify fully-qualified from address (cfengine2)

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: [SMTP] How to specify fully-qualified from address (cfengine2) Author: raffen Link to topic: https://cfengine.com/forum/read.php?3,19876,19876#msg-19876 My email provider has a SMTP server that refuses to send email unless the "from" address is valid. It looks like

Cfengine Help: Re: ETA for community 3.1.3?

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Re: ETA for community 3.1.3? Author: neilhwatson Link to topic: https://cfengine.com/forum/read.php?3,19857,19883#msg-19883 The Solaris pattern matching fix. This will be for production so I'm not keen on using any SVN build. ___

Cfengine Help: Re: [SMTP] How to specify fully-qualified from address (cfengine2)

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Re: [SMTP] How to specify fully-qualified from address (cfengine2) Author: neilhwatson Link to topic: https://cfengine.com/forum/read.php?3,19876,19884#msg-19884 I think that this is a DNS/SMTP problem. Your resolver has to know what SMTP server to use for email. I

Cfengine Help: Re: cf_lock.db gets bigger and bigger

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Re: cf_lock.db gets bigger and bigger Author: mark Link to topic: https://cfengine.com/forum/read.php?3,19875,19885#msg-19885 I don't see this behaviour on our systems. Do you have some data in a promiser-string that changes on each invocation, e.g. like a date. Cfen

Cfengine Help: Re: How to compile CFENGINE with Database support?

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Re: How to compile CFENGINE with Database support? Author: David Brazzeal Link to topic: https://cfengine.com/forum/read.php?3,19870,19886#msg-19886 Cool. Thanks Mark!! ___ Help-cfengine mailing list Help-cfengine@cfengine.

iprange not working

2010-12-22 Thread JIM AMANATIDIS, BLOOMBERG/ 731 LEXIN
Having an issue with iprange not working in v3. Stripped out everything and reduced it to this code snippet (below), still not working. What gives? # cat test.cf body common control { bundlesequence => { "test_routes" }; } bundle agent test_routes { classes: "Has_Net1" expression => ipr

Fwd:iprange not working

2010-12-22 Thread JIM AMANATIDIS, BLOOMBERG/ 731 LEXIN
Note, ran this through with "--debug", seems that cf-agent does not pick up the interface for the missing subnet? # ifconfig aggr4 aggr4: flags=1001000843 mtu 9000 index 19 inet 10.125.7.98 netmask ff80 broadcast 10.125.7.127 ether 0:14:4f:de:4c:6 # grep "Checking IP" tm

Cfengine Help: Re: How to compile CFENGINE with Database support?

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Re: How to compile CFENGINE with Database support? Author: neilhwatson Link to topic: https://cfengine.com/forum/read.php?3,19870,19887#msg-19887 Teaching a man to fish :) $ ./configure --help `configure' configures this package to adapt to many kinds of systems. Us

Cfengine Help: Re: How to compile CFENGINE with Database support?

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Re: How to compile CFENGINE with Database support? Author: David Brazzeal Link to topic: https://cfengine.com/forum/read.php?3,19870,19888#msg-19888 Thanks Neil! I wonder if I can re-configure with this option after the install. (It's just a test server) ___

Cfengine Help: Re: ETA for community 3.1.3?

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Re: ETA for community 3.1.3? Author: mark Link to topic: https://cfengine.com/forum/read.php?3,19857,19889#msg-19889 Normal schedule would be in January some time. We've had some extra releases as 3.1 was a big step. The exact timing for community releases depends a

Cfengine Help: Re: How to compile CFENGINE with Database support?

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Re: How to compile CFENGINE with Database support? Author: neilhwatson Link to topic: https://cfengine.com/forum/read.php?3,19870,19890#msg-19890 I don't think so. You would have t compile new binaries with new options. __

Re: iprange not working

2010-12-22 Thread Daniel Bidwell
On Wed, 2010-12-22 at 09:31 -0500, JIM AMANATIDIS, BLOOMBERG/ 731 LEXIN wrote: > Having an issue with iprange not working in v3. Stripped out everything and > reduced it to this code snippet (below), still not working. What gives? > I think your test for Net1 should be 10.125.7.128/25 instead o

Re: Cfengine Help: Re: Cfengine Help: cf-serverd memory leak still (v3.1.2)

2010-12-22 Thread Jesse Becker
On Wed, Dec 22, 2010 at 12:18:19AM -0500, no-re...@cfengine.com wrote: >Forum: Cfengine Help >Subject: Re: Cfengine Help: cf-serverd memory leak still (v3.1.2) >Author: mark >Link to topic: https://cfengine.com/forum/read.php?3,19854,19873#msg-19873 > >So far all our tests show zero growth for cf-s

Re: iprange not working

2010-12-22 Thread JIM AMANATIDIS, BLOOMBERG/ 731 LEXIN
Hi Daniel, 10.125.7.128/25 is for hosts in range 10.125.7.129 - 10.125.7.254 My host has IP 10.125.7.98 so the iprange of 10.125.7.0/25 is correct. Debugging shows that the interface IP itself is not seen, hence the test on iprange is failing. - Original Message - From: Daniel Bi

Cfengine Help: Re: Cfengine Help: cf-serverd memory leak still (v3.1.2)

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Re: Cfengine Help: cf-serverd memory leak still (v3.1.2) Author: mark Link to topic: https://cfengine.com/forum/read.php?3,19854,19891#msg-19891 We try various systems -- often set up VMs for the operating systems folks are having trouble with. Personally I am addict

Cfengine Help: Difference between client and server install and files

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Difference between client and server install and files Author: David Brazzeal Link to topic: https://cfengine.com/forum/read.php?3,19892,19892#msg-19892 Are the files and install steps pretty much the same between a server and a client? The one difference I can see

Cfengine Help: For communtity edition knowledge map, what needs to be done manually?

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: For communtity edition knowledge map, what needs to be done manually? Author: David Brazzeal Link to topic: https://cfengine.com/forum/read.php?3,19893,19893#msg-19893 I’m looking for the ability to see via a web page what computers have what versions of software ins

Re: Cfengine Help: [SMTP] How to specify fully-qualified from address (cfengine2)

2010-12-22 Thread Natxo Asenjo
On Wed, Dec 22, 2010 at 1:52 PM, wrote: > Forum: Cfengine Help > Subject: [SMTP] How to specify fully-qualified from address (cfengine2) > Author: raffen > Link to topic: https://cfengine.com/forum/read.php?3,19876,19876#msg-19876 > > My email provider has a SMTP server that refuses to send email

Cfengine Help: Re: For communtity edition knowledge map, what needs to be done manually?

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Re: For communtity edition knowledge map, what needs to be done manually? Author: David Brazzeal Link to topic: https://cfengine.com/forum/read.php?3,19893,19899#msg-19899 I think this sheds more light on my question: https://cfengine.com/inside/document/SpecialTopic

Cfengine Help: cf-serverd error on restart

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: cf-serverd error on restart Author: Sal Link to topic: https://cfengine.com/forum/read.php?3,19900,19900#msg-19900 Here's something I had not seen before. I had a cron job kill cf-serverd and cf-monitord at 4:10am today. There is a cron job that runs cf-execd every 2

Cfengine Help: Re: For communtity edition knowledge map, what needs to be done manually?

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Re: For communtity edition knowledge map, what needs to be done manually? Author: neilhwatson Link to topic: https://cfengine.com/forum/read.php?3,19893,19901#msg-19901 Why not just contact the CF AS sales folks? For the prospect of a sale I'm sure they'll be happy

Cfengine Help: Re: Cfengine Help: cf-serverd memory leak still (v3.1.2)

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Re: Cfengine Help: cf-serverd memory leak still (v3.1.2) Author: matter Link to topic: https://cfengine.com/forum/read.php?3,19854,19902#msg-19902 I have been doing some tests as well. I have the latest BerkeleyDB statically compiled and slimed down. Same with openss

Cfengine Help: Re: Cfengine Help: cf-serverd memory leak still (v3.1.2)

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Re: Cfengine Help: cf-serverd memory leak still (v3.1.2) Author: neilhwatson Link to topic: https://cfengine.com/forum/read.php?3,19854,19903#msg-19903 My observations match Matt's. I see the leak on Solaris, Linux and AIX. __

Cfengine Help: Re: For communtity edition knowledge map, what needs to be done manually?

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Re: For communtity edition knowledge map, what needs to be done manually? Author: David Brazzeal Link to topic: https://cfengine.com/forum/read.php?3,19893,19905#msg-19905 ok. Thanks Neil! ___ Help-cfengine mailing list He

Cfengine Help: How to configure a client machine to contact the policy server and downloads updates?

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: How to configure a client machine to contact the policy server and downloads updates? Author: David Brazzeal Link to topic: https://cfengine.com/forum/read.php?3,19906,19906#msg-19906 Hi, This doc: http://www.cfengine.org/manuals/cf3-tutorial.html#The-policy-decisi

Re: Cfengine Help: How to configure a client machine to contact the policy server and downloads updates?

2010-12-22 Thread Deb Heller-Evans
I'm using the Nova version of Cfengine, but perhaps it's the same in the community version. When I want to add a client, I would bootstrap it to the policy server: cf-agent -B -s And they do a key exchange to enable a trust relationship. I believe it works the same way - go to Section 2.6 of

Re: Cfengine Help: How to configure a client machine to contact the policy server and downloads updates?

2010-12-22 Thread Deb Heller
David, I gave an incomplete answer. So sorry. What I should add is that you need to install Cfengine on the client, just as you did initially on the policy server. Then use cf-key and use the bootstrap command I gave you in the last email. At the moment I'm not sure where this is in the docu

Re: Cfengine Help: How to configure a client machine to contact the policy server and downloads updates?

2010-12-22 Thread Nick Anderson
On 12/22/2010 03:48 PM, no-re...@cfengine.com wrote: > This doc: > http://www.cfengine.org/manuals/cf3-tutorial.html#The-policy-decision-flow > Says this:"Every client machine contacts the policy server and downloads > these updates." > Can anyone help me find in the docs any step by step instruc

Re: Cfengine Help: How to configure a client machine to contact the policy server and downloads updates?

2010-12-22 Thread Deb Heller
Sorry for the multple posts, but I don't want to be giving you bad information... As I said, we use Nova. Your milage may vary with Community... I see no mention of bootstrapping clients (so far), but you may want to check out Section 7.3.3 Key exchange. of the Cf3 Concept Guide. Also, I see N

Cfengine Help: Re: cf-serverd error on restart

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Re: cf-serverd error on restart Author: Sal Link to topic: https://cfengine.com/forum/read.php?3,19900,19911#msg-19911 A new development from cf-serverd. Once I went to 3.1.2 I started seeing a new pattern. cf-serverd segfaults every time the client servers connect.

Re: Cfengine Help: Re: Cfengine Help: cf-serverd memory leak still (v3.1.2)

2010-12-22 Thread Nicolas Charles
We have the same comportement. It *appears* that building from the source leads to a binary that leaks less than the one provided in the official package (if I remember well, the only differences are the version of libpcre, libdb and libdl, as well as libpromises which is not linked in the same

Cfengine Help: Re: classes

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Re: classes Author: Sal Link to topic: https://cfengine.com/forum/read.php?3,19835,19912#msg-19912 I have come up with a different solution for this type of problem. I create a var then declare the class. bundle common prod_host_classes { vars: "prod_web_ho

Cfengine Help: Re: Extended solutions guide and YOUR HELP!

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Re: Extended solutions guide and YOUR HELP! Author: n...@cmdln.org Link to topic: https://cfengine.com/forum/read.php?3,19429,19913#msg-19913 ro Wrote: --- > I was more thinking along the lines of visual code > appea

Re: Cfengine Help: Re: Extended solutions guide and YOUR HELP!

2010-12-22 Thread Nick Anderson
On 12/22/2010 07:05 PM, no-re...@cfengine.com wrote: > I think it is something that is needed. To that end I tossed up the > beginnings of my notes for a style guide on github. Contributions are > welcome. Looks like the url for the repo didnt make it into the post. https://github.com/nickande

Re: Cfengine Help: How to configure a client machine to contact the policy server and downloads updates?

2010-12-22 Thread Erlend Leganger
On 22 December 2010 23:28, Nick Anderson wrote: > I have attached my failsafe.cf and update.cf for your enjoyment. My > update configuration might be slightly more than the best practice > recommends but I thought it would be nice to have my /etc/motd updated > with the time of the last successful

Re: Cfengine Help: How to configure a client machine to contact the policy server and downloads updates?

2010-12-22 Thread Nick Anderson
On 12/22/2010 11:04 PM, Erlend Leganger wrote: > I like it. Would you mind posting motd.tpl as well, just to complete > the picture? Glad you like it. Here is motd.tpl. I think I want to extend it a bit, seems like it would be nice to have a local portion of the motd as well as the global. So tha

Re: Cfengine Help: How to configure a client machine to contact the policy server and downloads updates?

2010-12-22 Thread Erlend Leganger
On 23 December 2010 06:09, Nick Anderson wrote: > On 12/22/2010 11:04 PM, Erlend Leganger wrote: >> I like it. Would you mind posting motd.tpl as well, just to complete >> the picture? > > Glad you like it. Here is motd.tpl. > > I think I want to extend it a bit, seems like it would be nice to hav

Cfengine Help: Re: Extended solutions guide and YOUR HELP!

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Re: Extended solutions guide and YOUR HELP! Author: n...@cmdln.org Link to topic: https://cfengine.com/forum/read.php?3,19429,19914#msg-19914 mark Wrote: --- > To start the ball rolling, here is a > thanksgiving-givi

Cfengine Help: Re: Extended solutions guide and YOUR HELP!

2010-12-22 Thread no-reply
Forum: Cfengine Help Subject: Re: Extended solutions guide and YOUR HELP! Author: n...@cmdln.org Link to topic: https://cfengine.com/forum/read.php?3,19429,19915#msg-19915 JarleB Wrote: --- > How about using an existing service like > http://snip