Re: Authentication problem

[Mark Burgess]

Try running with -d2 to see why it fails
M

On Thu, 2005-12-15 at 13:56 -0500, bfay@deepcosmos.ca wrote:
> Oh!  My mistake about trustkey.  I have removed it from cfservd.conf.  It
> was already part of the the copy stanza.
> 
> Now, this have not fix my problem of authentication.  I still have the
> following message when trying to use cfrun:
> 
> #cfrun lablin03
> cfrun(0):         .......... [ Hailing lablin03 ] ..........
>  Host authentication failed. Did you forget the domain name or IP/DNS
> address registration (for ipv4 or ipv6)?
> #
> 
> 
> I ran cfagent directly on the client for a test and everything went ok.
> 
> Now where is the problem of authentication with cfrun?
> 
> Thanks,
> Bernard
> 
> 
> 
> Original Message:
> -----------------
> From: Mark Burgess Mark.Burgess@iu.hio.no
> Date: Thu, 15 Dec 2005 19:28:34 +0100
> To: bfay@deepcosmos.ca, help-cfengine@gnu.org
> Subject: Re: Authentication problem
> 
> 
> 
> Ah - I think I am confused by your headers. You have both files called
> cfservd.conf. There is no global trustkey in cfagent.conf. You need to
> add this to each copy stanza
> M
> 
> On Thu, 2005-12-15 at 12:55 -0500, bfay@deepcosmos.ca wrote:
> > I am not sure to follow you.  Isn't it trustKeysFrom that is an access
> > control list for network addresses?  
> > 
> > The documentation at http://www.cfengine.org/docs/cfengine-Reference.html
> > shows trustkey as being an true|false. 
> > 
> > Thanks
> > 
> > 
> > Original Message:
> > -----------------
> > From: Mark Burgess Mark.Burgess@iu.hio.no
> > Date: Thu, 15 Dec 2005 18:36:46 +0100
> > To: bfay@deepcosmos.ca, help-cfengine@gnu.org
> > Subject: Re: Authentication problem
> > 
> > 
> > 
> > Trustkey isnot "true" but an access control list for network addresses.
> > M
> > 
> > On Thu, 2005-12-15 at 09:48 -0500, bfay@deepcosmos.ca wrote:
> > > Hello,
> > > 
> > > I have an authentication problem when using cfrun.  Someone knows where
> > the
> > > problem comes from?
> > > 
> > > 
> > > # cfrun lablin03
> > > cfrun(0):         .......... [ Hailing lablin03 ] ..........
> > >  Host authentication failed. Did you forget the domain name or IP/DNS
> > > address registration (for ipv4 or ipv6)?
> > > #
> > > 
> > > 
> > > 
> > > cfservd.conf on serveur side if useful:
> > > 
> > > #########################################################
> > > #
> > > # cfservd.conf (serveur) pour Promutuel
> > > #
> > > #########################################################
> > > 
> > > control:
> > >   domain = ( informatique.promutuel.ca )
> > >   TrustKeysFrom = ( 10.99.23.0/25 )
> > >   AllowUsers = ( root )
> > >   AllowConnectionsFrom = ( 10.99.23.0/25 )
> > > 
> > >   ChecksumDatabase = ( /tmp/testDATABASEcache )
> > >   IfElapsed = ( 1 )
> > >   MaxConnections = ( 10 )
> > > 
> > > #########################################################
> > > 
> > > admit:   # or grant:
> > >   /var/cfengine/repository 10.99.23.*
> > > 
> > > 
> > > 
> > > cfservd.conf on client side if useful:
> > > 
> > > #########################################################
> > > #
> > > # cfservd.conf pour Promutuel (Client Cfengine)
> > > #
> > > #########################################################
> > > 
> > > control:
> > >    domain = ( informatique.promutuel.ca )
> > >    TrustKeysFrom = ( 10.99.0.153 )
> > >    AllowUsers = ( root )
> > >    trustkey = ( true )
> > > 
> > >    ChecksumDatabase = ( /tmp/testDATABASEcache )
> > >    IfElapsed = ( 1 )
> > >    MaxConnections = ( 10 )
> > >    AllowConnectionsFrom = ( 10.99.0.153 )
> > > 
> > >    LogAllConnections = ( true )
> > >    cfrunCommand  = ( "/usr/sbin/cfagent" )
> > > 
> > > 
> > > 
> > > Thanks,
> > > Bernard
> > > 
> > > 
> > > --------------------------------------------------------------------
> > > mail2web - Check your email from the web at
> > > http://mail2web.com/ .
> > > 
> > > 
> > > 
> > > 
> > > _______________________________________________
> > > Help-cfengine mailing list
> > > Help-cfengine@gnu.org
> > > http://lists.gnu.org/mailman/listinfo/help-cfengine
> > 
> > 
> > --------------------------------------------------------------------
> > mail2web - Check your email from the web at
> > http://mail2web.com/ .
> > 
> > 
> 
> 
> --------------------------------------------------------------------
> mail2web - Check your email from the web at
> http://mail2web.com/ .
> 
>