I have done som changes to the central update.conf file. The intention was to introduce a redundant policyhost if the main server was down. (Yes, i know the star-configuration is not optimal. I will change this).
My problem is when i introduced the secondary server, the firewall configuration was not updated so the hosts could reach that server. This created a timeout when cfagent tried to connect to the secondary server. My problem is that no host since that time has updated itself, not even from the primary policyhost. But "cfexecd" is still running on every host! 1) Is this a problem with locks preventing cfexecd to perform updates? 2) Will my new update.conf prevent this from happening in the future? 3) If not, any ideas how this did happen? control: actionsequence = ( copy.IfElapsed10.ExpireAfter30 processes tidy ) domain = ( mss.mnemonic.no ) # Needed for remote copy sysadm = ( [EMAIL PROTECTED] ) mailserver = ( somemailserver.mnemonic.no ) EmailMaxLines = ( 100 ) # # Spamming and lock control # IfElapsed = ( 10 ) ExpireAfter = ( 40 ) # # Which host/dir is the master for configuration roll-outs? # policyhost = ( somehost.mnemonic.no ) policyhost_svg = ( anotherhost.mnemonic.no ) master_cfinput = ( /var/cfengine/inputs ) master_cfinput_svg = ( /var/lib/cfengine2/inputs ) SplayTime = ( 15 ) copy: $(master_cfinput) dest=$(workdir)/inputs r=inf mode=700 type=binary exclude=*.lst exclude=*~ exclude=#* exclude=Entries exclude=Repository exclude=Root exclude=CVS exclude=cfservd.conf server=$(policyhost) trustkey=true elsedefine=failover_svg failover_svg:: $(master_cfinput_svg) dest=$(workdir)/inputs r=inf mode=700 type=binary exclude=*.lst exclude=*~ exclude=#* exclude=Entries exclude=Repository exclude=Root exclude=CVS exclude=cfservd.conf server=$(policyhost_svg) -- Jon-Finngard Moe Email: [EMAIL PROTECTED] mnemonic AS, Wergelandsveien 25 Mob : +47 98 64 58 62 N-0167 Oslo, Norway Tlf : +47 23 20 47 45 Fax : +47 23 20 47 01 PGP key EEAADBBA available from pgp.mit.edu
pgpcNDKpKfozR.pgp
Description: PGP signature
_______________________________________________ Help-cfengine mailing list Help-cfengine@gnu.org http://lists.gnu.org/mailman/listinfo/help-cfengine