cfservd.conf admit: issues

I just upgraded from v2.2.3 to v2.2.7 and experienced this same error, "Missing absolute path to a directory", when trying to run cfservd.

>From my cfservd.conf:
#########################################################

admit:

        cfe_servers::

                /export/cfengine        ${hostlist} encrypt=true

#########################################################

If I remove "encrypt=true" then the error, "Missing absolute path to a directory", goes away.  It doesn't matter if my hostlist contains CIDR notation or just a list of IP addresses.

I have encrypt=true set for all my copy: operations so I hope that continues to apply, but having it in cfservd.conf was a way of enforcing that setting.

Alan Moxley

________________________________________

Mark Burgess Mark.Burgess at iu.hio.no
Wed Jun 18 09:30:06 CEST 2008

Lance,

the syntax for admit/deny is to use wildcards and substrings for
matching. There is no CIDR notation support there in version 2.

I agree that this is not clear from the documentation and I will look
at this. For now, I recommend rewriting your rules e.g. 10.0.0

Cfengine 3 will fix these things.

hope this helps
M

Lance Albertson wrote:
> Mark Burgess wrote:
>>
>> This is just not true. Nothing has changed here for a long long time.
>> Works just fine for me.
>
> If that is the case, then why am I getting this error when I have it
> formatted like the first example?
>
> # cfservd -F
> cf:cfservd:/var/cfengine/inputs/cfservd.conf:29: Missing absolute path
> to a directory
> cfservd:/var/cfengine/inputs/cfservd.conf:Cannot continue
>
> I can absolutely verify that line 29 is formatted exactly like the first
> example is below. I also tried this with 2.2.7 and got the same result.
>
> I went back and found out that 2.2.3 is the last version that worked
> with the syntax I'm having trouble with. I can't get 2.2.4 to compile
> correctly, so I'm not sure if it has the problem or not. I do know that
> it doesn't work on 2.2.5.
>
> Any ideas what might be going on?
>
> Thanks for looking!
>
>> Lance Albertson wrote:
>>> Bug #2! :-)
>>>
>>> Along with the upgrade (we're running 2.2.6), we noticed that the
>>> admit section in cfservd.conf no longer allows you to put a list of
>>> IP addresses. It basically assumes that each entry is a pair. Below
>>> is an example:
>>>
>>> What we had before that worked something like this (example IP ranges):
>>>
>>> admit:
>>>    /var/cfengine/repository/ 10.0.0.0/24 192.168.1.1/24 10.1.1.0/24
>>>
>>> We had to change it to something like this to make it work again:
>>>
>>> admit:
>>>    /var/cfengine/repository/ 10.0.0.0/24
>>>    /var/cfengine/repository/ 192.168.1.1/24
>>>    /var/cfengine/repository/ 10.1.1.0/24
>
>
>

--