On Feb 3, 2011, at 14:44, no-re...@cfengine.com wrote: > Forum: Cfengine Help > Subject: Re: allowconntect, trustkeysfrom and admit syntax > Author: neilhwatson > Link to topic: https://cfengine.com/forum/read.php?3,20425,20428#msg-20428 > > There is some debate that this may fix the authentication problem that I've > been having. Someone claimed that doing this made this problem go away until > they had time to upgrade. I'm trying to test that now.
FWIW, I've fixed an authentication problem when adding an extra policy server by removing the stray root-.pub key from that extra policy server and all clients. It took me several hours to figure out what was going on and the IPv4 vs IPv6 IP notation also confused me, but in the end removing all stray keys and restarting the cf-serverd on the policy servers fixed it. It might be true that Cfengine 3.1.4 no longer -generates- the stray keys, but it still reads them and it still causes all kind of authentication problems. Regards, Erik -- Erik Mouw -- erik.m...@snow.nl Snow B.V. -- http://snow.nl/ _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine
