Re: cfservd.conf admit: issues

Lance Albertson schrieb:
> Mark Burgess wrote:
>>
>> Lance,
>>
>> the syntax for admit/deny is to use wildcards and substrings for
>> matching. There is no CIDR notation support there in version 2.
>>
>> I agree that this is not clear from the documentation and I will look
>> at this. For now, I recommend rewriting your rules e.g. 10.0.0
> 
> I just tried doing what you recommended and I get the same error. For
> the record, here's the exact line I'm trying:
> 
>     /var/cfengine/repository/ 10.0.0 10.1.0
> 
> This is using 2.2.7. Does anyone else get the same error I am?
> 
> Thanks-
> 
> 


Hello!

I've just started updating our systems from 2.2.3 to 2.2.8 and I get
this message while starting cfservd:

[root@cftest ~]# service cfservd start
cfservd starten: cf:cfservd:/var/cfengine/inputs/cfservd.conf:69:
Missing absolute path to a directory
cfservd:/var/cfengine/inputs/cfservd.conf:Cannot continue
                                                           [FEHLGESCHLAGEN]

In my config I have these lines:

groups:

  cfengine_server 	= ( XXX.rrz.uni-koeln.de )
	
control:

...

    workdir			= ( /var/cfengine )
    config_repository		= ( /afs/.rrz/admin/cfengine/config )


and


admit:
	
  cfengine_server::

    ${config_repository}	*.rrz.uni-koeln.de
    ${workdir}/config/ppkeys	*.rrz.uni-koeln.de *.uni-koeln.de
				encrypt=true
		
  any::
	
    ${workdir}/inputs		*.rrz.uni-koeln.de *.uni-koeln.de	
    ${workdir}/config		*.rrz.uni-koeln.de *.uni-koeln.de	
    ${workdir}/bin/cfagent	*.rrz.uni-koeln.de *.uni-koeln.de	
    ${cfrunCommand}		*.rrz.uni-koeln.de *.uni-koeln.de


Line 69 is the one with ${workdir}/config/ppkeys.


If I change this to

    ${workdir}/config/ppkeys	*.rrz.uni-koeln.de
    ${workdir}/config/ppkeys	*.uni-koeln.de
#				encrypt=true

All is fine. But this one fails:

    ${workdir}/config/ppkeys	*.rrz.uni-koeln.de
				encrypt=true
    ${workdir}/config/ppkeys	*.uni-koeln.de
				encrypt=true

and this one too:

    ${workdir}/config/ppkeys	*.rrz.uni-koeln.de encrypt=true
    ${workdir}/config/ppkeys	*.uni-koeln.de encrypt=true


I know that "*.rrz.uni-koeln.de *.uni-koeln.de"  is redundant... I once
played with these options and never removed the lines...

The interesting part is that the lines in the 'any' section seem to be
okay ... and that the system I used for the test is not my cfengine
server. X-|

Oh.... and this one works:

admit:
  any::
#  cfengine_server::

    ${config_repository}	*.rrz.uni-koeln.de
    ${workdir}/config/ppkeys	*.rrz.uni-koeln.de *.uni-koeln.de encrypt=true
		
#  any::
	
    ${workdir}/inputs		*.rrz.uni-koeln.de *.uni-koeln.de	
    ${workdir}/config		*.rrz.uni-koeln.de *.uni-koeln.de	
    ${workdir}/bin/cfagent	*.rrz.uni-koeln.de *.uni-koeln.de	
    ${cfrunCommand}		*.rrz.uni-koeln.de *.uni-koeln.de


What am I missing?


Best Regards,
Berthold Cogel