I have done som changes to the central update.conf file. The intention was to introduce a redundant policyhost if the main server was down. (Yes, i know the star-configuration is not optimal. I will change this).
My problem is when i introduced the secondary server, the firewall
configuration was not updated so the hosts could reach that server.
This created a timeout when cfagent tried to connect to the secondary
server. My problem is that no host since that time has updated itself, not
even from the primary policyhost. But "cfexecd" is still running on every
host!
1) Is this a problem with locks preventing cfexecd to perform updates?
2) Will my new update.conf prevent this from happening in the future?
3) If not, any ideas how this did happen?
control:
actionsequence = ( copy.IfElapsed10.ExpireAfter30
processes
tidy )
domain = ( mss.mnemonic.no ) # Needed for remote copy
sysadm = ( [EMAIL PROTECTED] )
mailserver = ( somemailserver.mnemonic.no )
EmailMaxLines = ( 100 )
#
# Spamming and lock control
#
IfElapsed = ( 10 )
ExpireAfter = ( 40 )
#
# Which host/dir is the master for configuration roll-outs?
#
policyhost = ( somehost.mnemonic.no )
policyhost_svg = ( anotherhost.mnemonic.no )
master_cfinput = ( /var/cfengine/inputs )
master_cfinput_svg = ( /var/lib/cfengine2/inputs )
SplayTime = ( 15 )
copy:
$(master_cfinput) dest=$(workdir)/inputs
r=inf
mode=700
type=binary
exclude=*.lst
exclude=*~
exclude=#*
exclude=Entries
exclude=Repository
exclude=Root
exclude=CVS
exclude=cfservd.conf
server=$(policyhost)
trustkey=true
elsedefine=failover_svg
failover_svg::
$(master_cfinput_svg) dest=$(workdir)/inputs
r=inf
mode=700
type=binary
exclude=*.lst
exclude=*~
exclude=#*
exclude=Entries
exclude=Repository
exclude=Root
exclude=CVS
exclude=cfservd.conf
server=$(policyhost_svg)
--
Jon-Finngard Moe Email: [EMAIL PROTECTED]
mnemonic AS, Wergelandsveien 25 Mob : +47 98 64 58 62
N-0167 Oslo, Norway Tlf : +47 23 20 47 45
Fax : +47 23 20 47 01
PGP key EEAADBBA available from pgp.mit.edu
pgpcNDKpKfozR.pgp
Description: PGP signature
_______________________________________________ Help-cfengine mailing list [email protected] http://lists.gnu.org/mailman/listinfo/help-cfengine
