Forum: Cfengine Help
Subject: Re: REFUSAL of request from connecting host: (SYNCH
Author: bglomm
Link to topic: https://cfengine.com/forum/read.php?3,17872,17884#msg-17884
thnx a lot Neil,
outch! you were right... although I thought I tried hardcoding before.... AND I
HAD a look in the -d3 output of the agent and saw the variable expanding. ???
Why doesn't the server?
> Does the snipped output from cf-serverd show anything about the access rules?
Nope... that's all:
...
cf3 *****************************************************************
cf3 BUNDLE access_rules
cf3 *****************************************************************
cf3
cf3
cf3 =========================================================
cf3 access in bundle access_rules (0)
cf3 =========================================================
cf3
cf3
...
but now that it works I got:
...
cf3
cf3 *****************************************************************
cf3 BUNDLE access_rules
cf3 *****************************************************************
cf3
cf3
cf3 =========================================================
cf3 roles in bundle access_rules (0)
cf3 =========================================================
cf3
cf3 RHS of authorize promise for .* should be a list
cf3
cf3 *****************************************************************
...
which is a comment on my code
---snipp---
roles:
".*"
authorize => { "root" },
comment => "It must be root who maintain cfengine";
---snapp---
cf-promise seems to be satisfied with the syntax, so what das he mean by
"should"?
"must", "could" ? why should AND how do I do that?
And what'nd where is "cf-twin" an executable(!) cf-execd is asking for in the
logfile??
thnx again
Bernhard
_______________________________________________
Help-cfengine mailing list
[email protected]
https://cfengine.org/mailman/listinfo/help-cfengine