Package: debian-edu-config Version: 2.12.32 There are regular failed connection attempts as follows logged:
Jul 17 12:55:43 tjener.intern cf-serverd[1031]: error: Remote host '::1' not in allowconnects, denying connection Jul 17 12:55:43 tjener.intern cf-serverd[1031]: CFEngine(server) Remote host '::1' not in allowconnects, denying connection Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Failed to establish TLS connection: underlying network error (Broken pipe) Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) No suitable server found for '/var/lib/cfengine3/inputs' Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Promise belongs to bundle 'failsafe_cfe_internal_update' in file '/var/lib/cfengine3/inputs/failsafe.cf' near line 121 Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Errors encountered when actuating files promise '/var/lib/cfengine3/inputs' Jul 17 12:55:43 tjener.intern cf-serverd[1031]: error: Remote host '::1' not in allowconnects, denying connection Jul 17 12:55:43 tjener.intern cf-serverd[1031]: CFEngine(server) Remote host '::1' not in allowconnects, denying connection Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Failed to establish TLS connection: underlying network error (Broken pipe) Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) No suitable server found for '/var/lib/cfengine3/modules' Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Promise belongs to bundle 'failsafe_cfe_internal_update' in file '/var/lib/cfengine3/inputs/failsafe.cf' near line 130 Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Errors encountered when actuating files promise '/var/lib/cfengine3/modules' Jul 17 12:55:43 tjener.intern cf-serverd[1031]: error: Remote host '::1' not in allowconnects, denying connection Jul 17 12:55:43 tjener.intern cf-serverd[1031]: CFEngine(server) Remote host '::1' not in allowconnects, denying connection Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Failed to establish TLS connection: underlying network error (Broken pipe) Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) No suitable server found for '/var/lib/cfengine3/inputs' Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Promise belongs to bundle 'failsafe_cfe_internal_update' in file '/var/lib/cfengine3/inputs/failsafe.cf' near line 144 Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Comment is 'If we failed to fetch policy we try again using the legacy default in case we are fetching policy from a hub that is not serving mastefiles via a shortcut.' Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Errors encountered when actuating files promise '/var/lib/cfengine3/inputs' Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Method 'failsafe_cfe_internal_update' failed in some repairs Jul 17 12:55:43 tjener.intern cf-serverd[1031]: error: Remote host '::1' not in allowconnects, denying connection Jul 17 12:55:43 tjener.intern cf-serverd[1031]: CFEngine(server) Remote host '::1' not in allowconnects, denying connection Jul 17 12:55:43 tjener.intern cf-agent[3731]: CFEngine(agent) Failed to establish TLS connection: underlying network error (Broken pipe) Jul 17 12:55:43 tjener.intern cf-agent[3731]: CFEngine(agent) No suitable server found for '/var/lib/cfengine3/inputs/cf_promises_validated' Jul 17 12:55:43 tjener.intern cf-agent[3731]: CFEngine(agent) Promise belongs to bundle 'cfe_internal_update_policy_cpv' in file '/var/lib/cfengine3/inputs/cfe_internal/update/update_policy.cf' near line 229 Jul 17 12:55:43 tjener.intern cf-agent[3731]: CFEngine(agent) Comment is 'Check whether a validation stamp is available for a new policy update to reduce the distributed load' Jul 17 12:55:43 tjener.intern cf-agent[3731]: CFEngine(agent) Errors encountered when actuating files promise '/var/lib/cfengine3/inputs/cf_promises_validated' Jul 17 12:55:43 tjener.intern cf-agent[3731]: CFEngine(agent) Method 'cfe_internal_update_policy_cpv' failed in some repairs Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Q: ".../cf-agent" -f /": error: Failed to establish TLS connection: underlying network error (Broken pipe) Q: ".../cf-agent" -f /": error: No suitable server found for '/var/lib/cfengine3/inputs/cf_promises_validated' Q: ".../cf-agent" -f /": error: Promise belongs to bundle 'cfe_internal_update_policy_cpv' in file '/var/lib/cfengine3/inputs/cfe_internal/update/update_policy.cf' near line 229 Q: ".../cf-agent" -f /": error: Comment is 'Check whether a validation stamp is available for a new policy update to reduce the distributed load' Q: ".../cf-agent" -f /": error: Errors encountered when actuating files promise '/var/lib/cfengine3/inputs/cf_promises_validated' Q: ".../cf-agent" -f /": error: Method 'cfe_internal_update_policy_cpv' failed in some repairs Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) R: Built-in failsafe policy triggered It seems that the agent tries to contact the server using the IPv6 loopback address which does not seem to be allowed by the configuration. -- Guido Berhoerster