Does anyone here have experience with multi-homed clients and 
authentication?  I have a case whereby a client has two network 
interfaces, one is accesible as a management network interface, and one 
is not.  For example,

rainier-mgt.some.com   - management, accessible via ssh; interface is 
NOT the default hostname

rainier.some.com       - other, non-routable, not accessible for this 
purpose, but this interface is also the default hostname


I believe that when running "cf-agent --bootstrap" the client 
self-identifies as rainier.some.com to the policy server, and when the 
policy server attempts to respond to rainier.some.com, there's no 
communication, and authentication fails.

We have over 30 boxes configured this way - does anyone have any ideas 
how I might fix this?  Someone mentioned using "bindtointerface" but I 
don't see how to implement that...?

By the way, all keys are properly positioned and in place.  I've cleaned 
out the inputs dir and all the new files get copied over - Things *seem* 
to be working, just authentication fails.

I need some good ideas... Anyone?

Thanks,

deb
_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to