cfengine copy problem (private vs. distributed)

[Thomas Glanzmann]

We have the following conecpt:

In the directory distributed are files which belong to all workstations.
In private are files which only belong to a specific host. A file in
private supersedes a file in distributed.

Now we have the following cfagent.conf scenario:

...
        groups:
         havepriv  = ( faui03 faui04a faui05 faui05m )
...

copy:

 any::

 $(workdir)/distributed/common   dest=/ ignore=RCS recurse=10 force=true 
server=$(policyhost) trustkey=true
 $(workdir)/distributed/$(cipos) dest=/ ignore=RCS recurse=10 force=true 
server=$(policyhost) trustkey=true

 havepriv::
  $(workdir)/private/$(host)     dest=/ ignore=RCS recurse=10 force=true 
server=$(policyhost) trustkey=true

...

If I let this scenario run with -q -v -K ... I get the following:

(ROOTfaui03) [~] cat /tmp/1
distributed

As you can see it should be private.

(ROOTfaui05) [/var/cfengine/inputs] cat /var/cfengine/distributed/solaris/tmp/1
distributed
(ROOTfaui05) [/var/cfengine/inputs] cat /var/cfengine/private/faui03/tmp/1
private


If I let run the following scenario:


(faui02) [/src/cfengine/sithglan/testscenario] cat cfagent.conf 
control:

 any::

  ChecksumUpdates     = ( on )
  ExpireAfter         = ( 120 )
  IfElapsed           = ( 30 )
  Inform              = ( on )
  Warnings            = ( off )
  actionsequence      = ( copy )
  domain              = ( informatik.uni-erlangen.de )
  smtpserver          = ( 131.188.30.102 )
  sysadm           = ( address@hidden )

copy:

        /src/cfengine/sithglan/testscenario/distributed dest=/tmp ignore=RCS 
recurse=10 force=true server=faui00k.informatik.uni-erlangen.de
        /src/cfengine/sithglan/testscenario/private dest=/tmp ignore=RCS 
recurse=10 force=true server=faui00k.informatik.uni-erlangen.de
(faui02) [/src/cfengine/sithglan/testscenario] cat cf
cfagent.conf  cfservd.conf  
(faui02) [/src/cfengine/sithglan/testscenario] cat cfservd.conf 
#-[control]---------------------------------------------------------------------

control:

  AllowConnectionsFrom = ( 131.188.30 )
  AllowMultipleConnectionsFrom = ( 131.188.30 )
  AllowUsers           = ( sithglan )
  DenyBadClocks        = ( false )
  LogAllConnections    = ( true )
  MaxConnections       = ( 50 )
  TrustKeysFrom        = ( 131.188.30 )
  domain               = ( informatik.uni-erlangen.de )

grant:
        /src/cfengine/sithglan/testscenario 131.188.30.*

The same happens ... so what is the matter?

Checking copy from localhost:/src/cfengine/sithglan/testscenario/distributed to 
/tmp
cfengine:faui00k: Update of image /tmp/1 from master 
/src/cfengine/sithglan/testscenario/distributed/1 on localhost
cfengine:faui00k: /tmp/1 had permission 600, changed it to 644
Checking copy from localhost:/src/cfengine/sithglan/testscenario/private to /tmp
cfengine:faui00k: Update of image /tmp/1 from master 
/src/cfengine/sithglan/testscenario/private/1 on localhost
Job start time set to Mon Oct 28 19:18:49 2002

(faui00k) [/src/cfengine/sithglan/testszenario] cat /tmp/1
distributed
(faui00k) [/src/cfengine/sithglan/testszenario] cat 
/src/cfengine/sithglan/testscenario/private/1
private

Or has anybody be a better machanism with the same idea behind it? What about 
using filter?

        ### The following lines are different from my newsposting ###
What about a filter? Could somebody give me an example of filter for distributed
which exclues all files of copy which match a path and a hostname?

Please reply also by eMail.

--
Thomas Glanzmann  ++49 (0) 9131 85-28725   Department of Computer Science IV 
Martensstrasse 1  D-91058 Erlangen Germany  University of Erlangen-Nuremberg
               http://wwwcip.informatik.uni-erlangen.de/CIP/