I would add that a common problem with the default Redhat distributions is /etc/nsswitch.conf is incorrectly set up. /etc/host should be: 127.0.0.1 localhost.localdomain localhost 141.204.117.244 ksprm02 ksprm02.dev.full.name
Then the line from /etc/nsswitch.conf should be: hosts: dns [NOTFOUND=continue] files This will make all the hostname options work as expected as well as allow local additions outside of DNS for testing etc. Larry Littlefield On Wed, 2006-02-15 at 08:50 +0000, Marco van Beek wrote: > > David E. Nelson wrote: > > > > I haven't been following this thread very closely, but thought I'd pitch > > in a little nugget that bit me this afternoon on some RedHat boxes. > > This kept me from authenticating to the CFEngine server because reverse > > DNS lookups would fail. > > I would just like to add that almost all our our authentication problems > have been caused by some form of lookup problem. This is what I now do: > > 1) Check both /etc/hosts files - make sure localhost/localdomain is only > on the line for 127.0.0.1, and not the public/private IP address (which > should have the full name & short alias). > > 2) Run /bin/hostname and make sure it gives you the full name. I also > tend to run "hostname -d" to check the domain name, hostname -f to > double check the FQDN, and hostname -s to check the shortname. I do this > to double check as I think (and I never got to the bottom) that hostname > on it's own was checking the hosts file, and hostname with an argument > checked the hostname file. > > 3) Check both forward & reverse dns at BOTH ends. (I don't think reverse > DNS matters too much to CFEngine but is a good indicator of a bad DNS > setup somewhere). You should get the same results. > > All the other authentication problems have either been badly configured > cfservd conf files, or a bad key (fogetting to press the insert key in > vi before pasting the key in is my favourite!). > > Regards, > > Marco. _______________________________________________ Help-cfengine mailing list [email protected] http://lists.gnu.org/mailman/listinfo/help-cfengine _______________________________________________ Help-cfengine mailing list [email protected] http://lists.gnu.org/mailman/listinfo/help-cfengine
