closer to solving (common) authentication issues

[paul beard]

I hope this is reproducible but I was able to successfully pull a  
cfagent.conf file from my policyhost to a client. So far, so good.  
I'm finding that the (mis)use of the class 'any::' somehow signals  
cfengine to ignore my commands. Everytime I remove it from the copy- 
and-paste example files, things work.

Anyway, I'm sure I'll learn how I misused it later, but I am looking  
at the most common error encountered by budding cfengineers.

*********************************************************************
Main Tree Sched: copy pass 1 @ Thu Feb  9 06:53:44 2006
*********************************************************************

Checking copy from cint0.waypath.com:/exports/files/etc/hosts to /etc/ 
hosts
Connect to cint0.waypath.com = 192.168.10.20 on port cfengine
Updating last-seen time for cint0.waypath.com
Loaded /var/cfengine/ppkeys/root-192.168.10.20.pub

...............................................................
cfengine:ols5: Strong authentication of server=cint0.waypath.com  
connection confirmed
cfengine:ols5: Server returned error:  Host authentication failed.  
Did you forget the domain name or IP/DNS address registration (for  
ipv4 or ipv6)?
cfengine:ols5: Can't stat /exports/files/etc/hosts in copy

I don't know how it gets from "strong authentication" to "Host  
authentication failed."

What really makes me scratch my head is when I crank debug output to d3:

cfengine:: (Can't stat /exports/files/var)cfengine:: Server returned  
error:  Host authentication failed. Did you forget the domain name or  
IP/DNS address registration (for ipv4 or ipv6)?
cfengine:: (Can't stat /exports/files/usr)

< there's lots more of this >

It's seeing the directories on the other system, the policyhost,  
while it tells me it can't authenticate the policyhost.


--
Paul Beard
contact info: www.paulbeard.org/paulbeard.vcf

Are you trying to win an argument or solve a problem?