Re: Problems using class of class in cfservd

[Mark . Burgess]

This works for me. But I notice that "hostiplist" is not properly defined. Also,
I don't think you can use a variable in that iterative way there... My guess is
one of thes things instead.

M

On  1 Aug, Brian Youngstrom wrote:
> RedHat 7.1
> Cfengine 2.0.3
> 
> Problem: cfservd allow: doesn't know how to handle a class defined by
>    a class
> 
> *** cf.groups:
> groups:
>       cluster1_master = ( c1_master )
>       cluster1_member = ( c1_member01 c1_member02 )
> 
>       cluster2_master = ( c2_master )
>       cluster2_member = ( c2_member01 c2_member02 )
> 
>       cluster_masters = ( cluster1_master cluster2_master )
> 
> *** END cf.groups
> 
> *** cfservd.conf:
> import:
>         cf.groups
> control:
>               hostiplist = ( 127.0.0.1 1.2.3.4 1.2.3.5, 1.2.3.6, 1.2.3.7, 
> 1.2.3.8, 1.2.3.9)
>               TrustKeysFrom = ( 1.2.3.0/24 )
>               AllowConnectionsFrom = ( $(hostiplist) )
>               AllowMultipleConnectionsFrom = ( $(hostiplist) )
>               <...>
> 
> admit:
>               cluster_masters::
>                       /path/file1             *.my.domain
>                       /path/file2             *.my.domain
> *** END cfservd.conf
> 
> This config generates the errors
>       Host authorization/authentication failed or access denied
>       From (host=c1_member01,user=root,ip=1.2.3.4)
> 
> If I change the line in cfservd.conf to
> "cluster1_master|cluster2_master::" all is well.
> 
> Running cfservd with -d2, I can see the classes are recognized and
> added to the heap:
>       AddClassToHeap(cluster_masters)
>       Appending [cluster_masters]
> 
> Seems like cfservd should be able to handle the cluster_masters class
> in the allow list.
> 
> 
> Thanks for your help
> 



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Work: +47 22453272            Email:  address@hidden
Fax : +47 22453205            WWW  :  http://www.iu.hio.no/~mark
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~