Re: cfservd.conf admit: issues

Lance,

the syntax for admit/deny is to use wildcards and substrings for 
matching. There is no CIDR notation support there in version 2.

I agree that this is not clear from the documentation and I will look 
at this. For now, I recommend rewriting your rules e.g. 10.0.0

Cfengine 3 will fix these things.

hope this helps
M

Lance Albertson wrote:
> Mark Burgess wrote:
>>
>> This is just not true. Nothing has changed here for a long long time. 
>> Works just fine for me.
> 
> If that is the case, then why am I getting this error when I have it 
> formatted like the first example?
> 
> # cfservd -F
> cf:cfservd:/var/cfengine/inputs/cfservd.conf:29: Missing absolute path 
> to a directory
> cfservd:/var/cfengine/inputs/cfservd.conf:Cannot continue
> 
> I can absolutely verify that line 29 is formatted exactly like the first 
> example is below. I also tried this with 2.2.7 and got the same result.
> 
> I went back and found out that 2.2.3 is the last version that worked 
> with the syntax I'm having trouble with. I can't get 2.2.4 to compile 
> correctly, so I'm not sure if it has the problem or not. I do know that 
> it doesn't work on 2.2.5.
> 
> Any ideas what might be going on?
> 
> Thanks for looking!
> 
>> Lance Albertson wrote:
>>> Bug #2! :-)
>>>
>>> Along with the upgrade (we're running 2.2.6), we noticed that the 
>>> admit section in cfservd.conf no longer allows you to put a list of 
>>> IP addresses. It basically assumes that each entry is a pair. Below 
>>> is an example:
>>>
>>> What we had before that worked something like this (example IP ranges):
>>>
>>> admit:
>>>    /var/cfengine/repository/ 10.0.0.0/24 192.168.1.1/24 10.1.1.0/24
>>>
>>> We had to change it to something like this to make it work again:
>>>
>>> admit:
>>>    /var/cfengine/repository/ 10.0.0.0/24
>>>    /var/cfengine/repository/ 192.168.1.1/24
>>>    /var/cfengine/repository/ 10.1.1.0/24
> 
> 
> 

-- 


Mark Burgess

Web: http://www.iu.hio.no/~mark
Tlf: +47 22453272