Re: Authentication problem

[Mark Burgess]

Ah - I think I am confused by your headers. You have both files called
cfservd.conf. There is no global trustkey in cfagent.conf. You need to
add this to each copy stanza
M

On Thu, 2005-12-15 at 12:55 -0500, bfay@deepcosmos.ca wrote:
> I am not sure to follow you.  Isn't it trustKeysFrom that is an access
> control list for network addresses?  
> 
> The documentation at http://www.cfengine.org/docs/cfengine-Reference.html
> shows trustkey as being an true|false. 
> 
> Thanks
> 
> 
> Original Message:
> -----------------
> From: Mark Burgess Mark.Burgess@iu.hio.no
> Date: Thu, 15 Dec 2005 18:36:46 +0100
> To: bfay@deepcosmos.ca, help-cfengine@gnu.org
> Subject: Re: Authentication problem
> 
> 
> 
> Trustkey isnot "true" but an access control list for network addresses.
> M
> 
> On Thu, 2005-12-15 at 09:48 -0500, bfay@deepcosmos.ca wrote:
> > Hello,
> > 
> > I have an authentication problem when using cfrun.  Someone knows where
> the
> > problem comes from?
> > 
> > 
> > # cfrun lablin03
> > cfrun(0):         .......... [ Hailing lablin03 ] ..........
> >  Host authentication failed. Did you forget the domain name or IP/DNS
> > address registration (for ipv4 or ipv6)?
> > #
> > 
> > 
> > 
> > cfservd.conf on serveur side if useful:
> > 
> > #########################################################
> > #
> > # cfservd.conf (serveur) pour Promutuel
> > #
> > #########################################################
> > 
> > control:
> >   domain = ( informatique.promutuel.ca )
> >   TrustKeysFrom = ( 10.99.23.0/25 )
> >   AllowUsers = ( root )
> >   AllowConnectionsFrom = ( 10.99.23.0/25 )
> > 
> >   ChecksumDatabase = ( /tmp/testDATABASEcache )
> >   IfElapsed = ( 1 )
> >   MaxConnections = ( 10 )
> > 
> > #########################################################
> > 
> > admit:   # or grant:
> >   /var/cfengine/repository 10.99.23.*
> > 
> > 
> > 
> > cfservd.conf on client side if useful:
> > 
> > #########################################################
> > #
> > # cfservd.conf pour Promutuel (Client Cfengine)
> > #
> > #########################################################
> > 
> > control:
> >    domain = ( informatique.promutuel.ca )
> >    TrustKeysFrom = ( 10.99.0.153 )
> >    AllowUsers = ( root )
> >    trustkey = ( true )
> > 
> >    ChecksumDatabase = ( /tmp/testDATABASEcache )
> >    IfElapsed = ( 1 )
> >    MaxConnections = ( 10 )
> >    AllowConnectionsFrom = ( 10.99.0.153 )
> > 
> >    LogAllConnections = ( true )
> >    cfrunCommand  = ( "/usr/sbin/cfagent" )
> > 
> > 
> > 
> > Thanks,
> > Bernard
> > 
> > 
> > --------------------------------------------------------------------
> > mail2web - Check your email from the web at
> > http://mail2web.com/ .
> > 
> > 
> > 
> > 
> > _______________________________________________
> > Help-cfengine mailing list
> > Help-cfengine@gnu.org
> > http://lists.gnu.org/mailman/listinfo/help-cfengine
> 
> 
> --------------------------------------------------------------------
> mail2web - Check your email from the web at
> http://mail2web.com/ .
> 
>