Is it me or is $(master_input) not actually defined in your cfservd.conf file. Cfengine will give a generic authorization/authentication error no matter what problem. So it gives error a client error because the file doesn't exist.
On Fri, 2005-04-22 at 10:21 -0700, [EMAIL PROTECTED] wrote: > I am getting the same errors, on .14, I am here is my output: > > cfservd: > > cfservd: lstatcfservd: Host authorization/authentication failed or access > denied > Transaction Send[t 114][Packed text] > Attempting to send 122 bytes > SendSocketStream, sent 122 > cfservd: From (host=telly.healthnet.com,user=root,ip=::ffff:141.177.30.211) > RecvSocketStream(8) > (Concatenated 8 from stream) > Transaction Receive [t 41][] > RecvSocketStream(41) > (Concatenated 41 from stream) > Received: [SYNCH 1114190189 STAT $(master_input)/bin] on socket 6 > AccessControl($(master_input)/bin) > cfservd: Couldn't stat filename $(master_input)/bin from host > telly.healthnet.com > > cfservd: lstatcfservd: Host authorization/authentication failed or access > denied > Transaction Send[t 114][Packed text] > Attempting to send 122 bytes > SendSocketStream, sent 122 > cfservd: From (host=telly.healthnet.com,user=root,ip=::ffff:141.177.30.211) > RecvSocketStream(8) > Transmission empty or timed out... > Transaction Receive [][] > RecvSocketStream(0) > cfservd terminating NULL transmission! > Terminating thread... > ***Closing socket 6 from ::ffff:141.177.30.211 > Deleted item 141.177.30.211 > IPV6 address > sockaddr_ntop(::ffff:141.177.30.204) > Obtained IP address of ::ffff:141.177.30.204 on socket 6 from accept > > FuzzyItemIn(LIST,141.177.30.204) > Purging Old Connections... > Done purging > > *******************END of cfservd output***************************** > > Agent, relative section only, have full listing, but it is BIG: > > --- > Actionsequence item copy > New server connection... > ExpandVarstring(cfmaster.healthnet.com) > ExpandVarstring(cfmaster.healthnet.com) > ExpandVarstring($(master_input)/inputs) > Returning substring value master_input > Scanning variable master_input > GetMacroValue(update,master_input) > Currently non existent variable $(master_input) > ExpandVarstring(/var/cfengine/inputs) > Checking copy from cfmaster.healthnet.com:$(master_input)/inputs to > /var/cfengin > e/inputs > ExpandVarstring(cfmaster.healthnet.com) > Opening server connnection to cfmaster.healthnet.com > IPV4 address > sockaddr_ntop(141.177.12.97) > Connect to cfmaster.healthnet.com = 141.177.12.97 on port cfengine > IPV4 address > sockaddr_ntop(141.177.12.97) > IPV4 address > sockaddr_ntop(141.177.12.97) > Found address (141.177.12.97) for host cfmaster.healthnet.com > Updating last-seen time for cfmaster.healthnet.com > Remote IP set to 141.177.12.97 > IPV4 address > sockaddr_ntop(141.177.30.211) > Identifying this agent as 141.177.30.211 i.e. telly.healthnet.com, with > signatur > e 0 > IsIPV6Address(telly) > Appending domain healthnet.com to telly > SENT:::CAUTH 141.177.30.211 telly.healthnet.com root 0 > Transaction Send[t 47][Packed text] > Attempting to send 55 bytes > SendSocketStream, sent 55 > ChecksumString(m) > OptionIs(update,HostnameKeys,1) > GetMacroValue(update,HostnameKeys) > KeyAuthentication(with IP keyname root-141.177.12.97) > Havekey(root-141.177.12.97) > Loaded /var/cfengine/ppkeys/root-141.177.12.97.pub > Transaction Send[t 280][Packed text] > Attempting to send 288 bytes > SendSocketStream, sent 288 > Modulus (2048 bit): > 00:c0:a3:0a:75:46:22:9c:8b:4f:80:41:d6:d6:55: > 0f:99:7f:90:55:0d:29:9d:9e:d5:1f:87:ef:c2:f7: > 8d:4c:8d:90:e9:05:63:78:ab:25:fb:55:f8:0a:a9: > da:37:04:3e:1c:ba:90:e5:5d:13:d4:bb:4e:29:97: > 0d:d2:11:e8:5b:ed:0f:cb:9b:be:15:65:69:0a:43: > ae:25:9f:c2:0c:bc:a5:0a:4b:5e:45:39:23:d1:56: > 64:7e:f4:08:6d:10:63:0e:fc:2a:cb:74:b6:2a:1b: > 18:0c:17:a2:e3:3a:51:11:ea:e4:1f:8e:d1:f6:2f: > df:00:3f:92:35:3e:5e:79:68:09:fb:eb:5f:a5:7f: > 19:d1:64:65:e7:a9:79:05:0e:37:5d:29:4a:4a:a3: > 18:71:3b:34:4e:28:4c:40:8e:c7:6b:93:66:61:05: > 67:1e:0a:07:e6:aa:8c:1c:d2:42:30:5d:a9:5e:7e: > 04:8e:62:05:e2:68:1e:6d:5d:10:e5:e4:fd:1d:8a: > ec:62:07:29:4b:68:35:d5:cc:4f:62:5b:f2:73:78: > 7d:7e:c9:ba:a4:4d:5f:e8:28:fd:c4:15:4d:61:bf: > cd:8c:79:5f:da:f7:4f:c8:17:41:84:84:6c:fd:7c: > ba:02:2c:0e:3e:7e:ef:c9:a7:8f:c8:90:3a:c1:44: > e8:21 > Exponent: 35 (0x23) > Transaction Send[t 261][Packed text] > Attempting to send 269 bytes > SendSocketStream, sent 269 > Transaction Send[t 5][Packed text] > Attempting to send 13 bytes > SendSocketStream, sent 13 > RecvSocketStream(8) > (Concatenated 8 from stream) > Transaction Receive [t 16][] > RecvSocketStream(16) > (Concatenated 16 from stream) > RecvSocketStream(8) > (Concatenated 8 from stream) > Transaction Receive [t 16][] > RecvSocketStream(16) > (Concatenated 16 from stream) > ExpandVarstring(cfmaster.healthnet.com) > > ............................................................... > cfengine:: Strong authentication of server=cfmaster.healthnet.com > connection con > firmed > Receive counter challenge from server > RecvSocketStream(8) > (Concatenated 8 from stream) > Transaction Receive [t 256][] > RecvSocketStream(256) > (Concatenated 256 from stream) > ChecksumString(m) > Replying to counter challenge with md5 > Transaction Send[t 16][Packed text] > Attempting to send 24 bytes > SendSocketStream, sent 24 > BinaryBuffer(16)[0001038ffffffb26000010001] = 16 > Generated session key > BinaryBuffer(16)[0001038ffffffb26000010001] = 16 > BinaryBuffer(16)[0001038ffffffb26000010001] = 16 > Encrypt 16 to 256 > Encryption succeeded > Transaction Send[t 256][Packed text] > Attempting to send 264 bytes > SendSocketStream, sent 264 > BinaryBuffer(256)[ffffff8410312dffffffba28ffffff93ffffffc21b57ffffff8cfffffffdff > ffffe317bffffff9541644622affffff881f18effffffc9fffffff53076ffffffc62effffffeefff > fffd6211e583f17ffffffe8ffffffc6ffffffe05a6dffffffb2ffffff8f6ffffffffeffffffabfff > fffa87effffffdbffffffed4affffff9e59ffffffd4ffffffe777433dfffffff6ffffffa710fffff > fe8fffffff4ffffffc043cffffffe83b77ffffffc7ffffff8407616ffffffdc647f1644ffffff8af > fffff8ffffffff1ffffffe9ffffffda34e3b53791b736bffffff8d1bffffffe73a77ffffffee234c > ffffff8b691ffffff9816ffffff853afffffff727fffffff57d2e1325ffffffccffffff88fffffff > d753d219f1a1fffffffe377ffffffb4ffffffb7fffffffaffffffd4582effffffafffffffa92f45f > fffffff9ffffff93ffffffc94e68ffffff9eb647537ffffff917effffffd110ffffffacffffffaef > fffffdf3c213040ffffffd4ffffff862effffff834266ffffff8a4d7fffffffcfffffffcfffffffa > fffffff63e5e77ffffffbdffffff92ffffffa35292725ffffff8affffffdbffffffae3f69ffffffc > 94ffffffc869ffffff88ffffff8b972a1971ffffffcdffffffc7ffffff9e1e59ffffffaa61366eff > ffffa2287812fffffffbffffffd7ffffffbc7b2c2dffffff8b40fffffff7ffffffdbffffff9affff > fff2ffffffba24ffffff8d5bffffff9e3619ffffff98fffffff70ffffffd45fffffff84196bfffff > faf4e20ffffffc004060416c133fffffffe84fffffff243ffffffbcffffffaa] = 256 > Authentic connection verified > cf_rstat($(master_input)/inputs) > GetCachedStatData($(master_input)/inputs) > Did not find in cache > Transaction Send[t 44][Packed text] > Attempting to send 52 bytes > SendSocketStream, sent 52 > RecvSocketStream(8) > (Concatenated 8 from stream) > Transaction Receive [t 114][] > RecvSocketStream(114) > (Concatenated 114 from stream) > cfengine:: Server returned error: Host authentication failed. Did you > forget th > e domain name or IP/DNS address registration (for ipv4 or ipv6)? > cfengine:: Can't stat $(master_input)/inputs in copy > ExpandVarstring(cfmaster.healthnet.com) > ExpandVarstring($(master_input)/scripts) > Returning substring value master_input > Scanning variable master_input > GetMacroValue(update,master_input) > Currently non existent variable $(master_input) > ExpandVarstring(/var/cfengine/scripts) > Server connection to cfmaster.healthnet.com already open on 4 > Authentic connection verified > cf_rstat($(master_input)/scripts) > GetCachedStatData($(master_input)/scripts) > Did not find in cache > Transaction Send[t 45][Packed text] > Attempting to send 53 bytes > SendSocketStream, sent 53 > RecvSocketStream(8) > (Concatenated 8 from stream) > Transaction Receive [t 114][] > RecvSocketStream(114) > (Concatenated 114 from stream) > cfengine:: Server returned error: Host authentication failed. Did you > forget th > e domain name or IP/DNS address registration (for ipv4 or ipv6)? > cfengine:: Can't stat $(master_input)/scripts in copy > ExpandVarstring(cfmaster.healthnet.com) > ExpandVarstring($(master_input)/init.d/cfservd) > Returning substring value master_input > Scanning variable master_input > GetMacroValue(update,master_input) > Currently non existent variable $(master_input) > ExpandVarstring(/etc/init.d/cfservd) > Checking copy from cfmaster.healthnet.com:$(master_input)/init.d/cfservd to > /etc > /init.d/cfservd > ExpandVarstring(cfmaster.healthnet.com) > Server connection to cfmaster.healthnet.com already open on 4 > Authentic connection verified > cf_rstat($(master_input)/init.d/cfservd) > GetCachedStatData($(master_input)/init.d/cfservd) > Did not find in cache > Transaction Send[t 72][Packed text] > Attempting to send 80 bytes > SendSocketStream, sent 80 > RecvSocketStream(8) > (Concatenated 8 from stream) > Transaction Receive [t 114][] > RecvSocketStream(114) > (Concatenated 114 from stream) > cfengine:: Server returned error: Host authentication failed. Did you > forget th > e domain name or IP/DNS address registration (for ipv4 or ipv6)? > cfengine:: Can't stat $(master_input)/init.d/cfservd in copy > ExpandVarstring(cfmaster.healthnet.com) > ExpandVarstring($(master_input)/init.d/cfexecd) > Returning substring value master_input > Scanning variable master_input > GetMacroValue(update,master_input) > Currently non existent variable $(master_input) > ExpandVarstring(/etc/init.d/cfexecd) > Checking copy from cfmaster.healthnet.com:$(master_input)/init.d/cfexecd to > /etc > /init.d/cfexecd > ExpandVarstring(cfmaster.healthnet.com) > Server connection to cfmaster.healthnet.com already open on 4 > Authentic connection verified > cf_rstat($(master_input)/init.d/cfexecd) > GetCachedStatData($(master_input)/init.d/cfexecd) > Did not find in cache > Transaction Send[t 72][Packed text] > Attempting to send 80 bytes > SendSocketStream, sent 80 > RecvSocketStream(8) > (Concatenated 8 from stream) > Transaction Receive [t 114][] > RecvSocketStream(114) > (Concatenated 114 from stream) > cfengine:: Server returned error: Host authentication failed. Did you > forget th > e domain name or IP/DNS address registration (for ipv4 or ipv6)? > cfengine:: Can't stat $(master_input)/init.d/cfexecd in copy > ExpandVarstring(cfmaster.healthnet.com) > ExpandVarstring($(master_input)/init.d/cfenvd) > Returning substring value master_input > Scanning variable master_input > GetMacroValue(update,master_input) > Currently non existent variable $(master_input) > ExpandVarstring(/etc/init.d/cfenvd) > Checking copy from cfmaster.healthnet.com:$(master_input)/init.d/cfenvd to > /etc/ > init.d/cfenvd > ExpandVarstring(cfmaster.healthnet.com) > Server connection to cfmaster.healthnet.com already open on 4 > Authentic connection verified > cf_rstat($(master_input)/init.d/cfenvd) > GetCachedStatData($(master_input)/init.d/cfenvd) > Did not find in cache > Transaction Send[t 51][Packed text] > Attempting to send 59 bytes > SendSocketStream, sent 59 > RecvSocketStream(8) > (Concatenated 8 from stream) > Transaction Receive [t 114][] > RecvSocketStream(114) > (Concatenated 114 from stream) > cfengine:: Server returned error: Host authentication failed. Did you > forget th > e domain name or IP/DNS address registration (for ipv4 or ipv6)? > cfengine:: Can't stat $(master_input)/init.d/cfenvd in copy > ExpandVarstring(cfmaster.healthnet.com) > ExpandVarstring($(master_input)/bin) > Returning substring value master_input > Scanning variable master_input > GetMacroValue(update,master_input) > Currently non existent variable $(master_input) > ExpandVarstring(/usr/local/sbin) > Checking copy from cfmaster.healthnet.com:$(master_input)/bin to > /usr/local/sbin > ExpandVarstring(cfmaster.healthnet.com) > Server connection to cfmaster.healthnet.com already open on 4 > Authentic connection verified > cf_rstat($(master_input)/bin) > GetCachedStatData($(master_input)/bin) > Did not find in cache > Transaction Send[t 41][Packed text] > Attempting to send 49 bytes > SendSocketStream, sent 49 > RecvSocketStream(8) > (Concatenated 8 from stream) > Transaction Receive [t 114][] > RecvSocketStream(114) > (Concatenated 114 from stream) > cfengine:: Server returned error: Host authentication failed. Did you > forget th > e domain name or IP/DNS address registration (for ipv4 or ipv6)? > cfengine:: Can't stat $(master_input)/bin in copy > Closing current connection > Saving the setuid log in /var/cfengine/cfagent.telly.log > Job start time set to Fri Apr 22 10:16:29 2005 > > > Russell Conner > Systems Engineer, VMS & Unix Systems > Health Net, Inc. > (916)935-3610 > > > |---------+----------------------------------------------------------> > | | Mark Burgess <[EMAIL PROTECTED]> | > | | Sent by: | > | | help-cfengine-bounces+russell.conner=healthnet.| > | | [EMAIL PROTECTED] | > | | | > | | | > | | 04/22/2005 10:08 AM | > | | | > |---------+----------------------------------------------------------> > > >------------------------------------------------------------------------------------------------------------------------------| > | > | > | To: Kelly Brown <[EMAIL PROTECTED]> > | > | cc: help-cfengine@gnu.org > | > | Subject: Re: authentication errors. > | > > >------------------------------------------------------------------------------------------------------------------------------| > > > > > Hi Kelly. > > Rund cfservd / cfagent with -d2 to see the detailed reason for the > rejection. > > M > > On Fri, 2005-04-22 at 09:58 -0700, Kelly Brown wrote: > > Hello all: > > > > I'm getting some authentication errors every time a client contacts > > cfservd. However, everything works ok. I would like to make the errors > > go away if they don't mean anything. It may be related to the fact that > > I have 3 different domains. Any ideas? > > > > Apr 22 09:53:09 cfserver cfservd[17097]: lstat > > Apr 22 09:53:09 cfserver cfservd[17097]: Host > > authorization/authentication failed or access denied > > Apr 22 09:53:09 cfserver cfservd[17097]: From > > (host=cfclient.colo.mydomain.com,user=root,ip=::ffff:10.9.1.158) > > > > > > > > _______________________________________________ > > Help-cfengine mailing list > > Help-cfengine@gnu.org > > http://lists.gnu.org/mailman/listinfo/help-cfengine > > > > _______________________________________________ > Help-cfengine mailing list > Help-cfengine@gnu.org > http://lists.gnu.org/mailman/listinfo/help-cfengine > > > > > > > This message,together with any attachments, is > intended only for the use of the individual or entity > to which it is addressed. It may contain information > that is confidential and prohibited from disclosure. > If you are not the intended recipient, you are hereby > notified that any dissemination or copying of this > message or any attachment is strictly prohibited. If > you have received this message in error, please notify > the original sender immediately by telephone or by > return e-mail and delete this message, along with any > attachments, from your computer. Thank you. > > > > > _______________________________________________ > Help-cfengine mailing list > Help-cfengine@gnu.org > http://lists.gnu.org/mailman/listinfo/help-cfengine -- Christian Pearce http://www.sysnav.com http://www.commnav.com http://www.perfectorder.com
signature.asc
Description: This is a digitally signed message part
_______________________________________________ Help-cfengine mailing list Help-cfengine@gnu.org http://lists.gnu.org/mailman/listinfo/help-cfengine
