I am trying to run cf-agent on host 10.27.41.150 by running cf-runagent on 
10.27.41.199.  Both hosts are running cf-serverd.

It looks like the key exchange is OK but then I get a "Server refusal due to 
denied access to requested object."

Not sure how to fix this.  I tried messing with the cfruncommand statement in 
promises.cf but this didn't fix anything.  

#cfruncommand          => "$(sys.workdir)/bin/cf-agent -f failsafe.cf && 
$(sys.workdir)/bin/cf-agent";
cfruncommand            => /usr/sbin/cf-agent;


Not sure what I need to grant access to, or how to grant access.

Thanks in advance!


cf3 New connection...(from ::ffff:10.27.41.199/5)
cf3 Spawning new thread...
cf3 Received: [CAUTH 10.27.41.199 pixie.mallab.cert.org root 0] on socket 5
cf3 Allowing 10.27.41.199 to connect without (re)checking ID
cf3 Non-verified Host ID is pixie.mallab.cert.org (Using skipverify)
cf3 Non-verified User ID seems to be root (Using skipverify)
cf3 LastSaw host pixie.mallab.cert.org now
cf3 Received: [SAUTH y 256 37 c] on socket 5
cf3 Loaded /var/cfengine/ppkeys/root-10.27.41.199.pub
cf3 A public key was already known from 
pixie.mallab.cert.org/::ffff:10.27.41.199 - no trust required
cf3 Adding IP ::ffff:10.27.41.199 to SkipVerify - no need to check this if we 
have a key
cf3 The public key identity was confirmed as r...@pixie.mallab.cert.org
cf3 Strong authentication of client pixie.mallab.cert.org/::ffff:10.27.41.199 
achieved
cf3 Received: [EXEC ] on socket 5
cf3 User root granted connection privileges
cf3 Host pixie.mallab.cert.org denied access to /
cf3 Server refusal due to denied access to requested object
cf3 From (host=pixie.mallab.cert.org,user=root,ip=::ffff:10.27.41.199)
cf3 ID from connecting host: (EXEC )


Lisa Sittler

_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to