Forum: Cfengine Help
Subject: Re: REFUSAL of request from connecting host: (SYNCH
Author: bglomm
Link to topic: https://cfengine.com/forum/read.php?3,17872,17884#msg-17884

thnx a lot Neil,

outch! you were right... although I thought I tried hardcoding before.... AND I 
HAD a look in the -d3 output of the agent and saw the variable expanding. ???
Why doesn't the server?


> Does the snipped output from cf-serverd show anything about the access rules?

Nope... that's all:

...
cf3 *****************************************************************
cf3 BUNDLE access_rules
cf3 *****************************************************************
cf3
cf3
cf3    =========================================================
cf3    access in bundle access_rules (0)
cf3    =========================================================
cf3
cf3
...

but now that it works I got:

...
cf3
cf3 *****************************************************************
cf3 BUNDLE access_rules
cf3 *****************************************************************
cf3
cf3
cf3    =========================================================
cf3    roles in bundle access_rules (0)
cf3    =========================================================
cf3
cf3 RHS of authorize promise for .* should be a list
cf3
cf3 *****************************************************************
...

which is a comment on my code

---snipp---
roles:
".*"
authorize => { "root" },
comment => "It must be root who maintain cfengine";
---snapp---

cf-promise seems to be satisfied with the syntax, so what das he mean by 
"should"?
"must", "could" ? why should AND how do I do that?

And what'nd where is "cf-twin" an executable(!) cf-execd is asking for in the 
logfile??

thnx again

Bernhard

_______________________________________________
Help-cfengine mailing list
[email protected]
https://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to