Managing Systems and Workgroups: A Guide for HP-UX System Administrators

Conﬁguring a System

Using Distributed Systems Administration Utilities

Chapter 3 171

• Edit the cfservd.conf File

The ﬁle /var/opt/dsau/cfengine_master/inputs/cfservd.conf

controls which managed clients have access to the ﬁles served by

cfservd on the master. Perform the following edits to cfservd.conf.

— Delete the following line entirely:

domain_name = ( “<%DOMAIN_NAMER%>” )

— Change the line reading

domain = ( “${domain_name}” )

to the following:

domain = ( ExecResult(/sbin/awk ‘/domain/ {print $2}’

/etc/resolv.conf) )

— The “admit:” stanza controls which remote clients have access to

ﬁles on the server. Change each “*.${domain_name}” to a space

separated list of managed client DNS domains. For example:

/var/opt/dsau/cfengine_master/master_files

*.abc.xyz.com *.cde.xyz.com

This example allows all the hosts in the listed domains to access

ﬁles on the master server. You also can specify lists of speciﬁc

hosts, IP address ranges, etc. Please see the cfengine reference

manual for additional information.

• Distribute the Master update.conf to Each Cluster Member

Use the following commands:

# cd /var/opt/dsau/cfengine/master_files/inputs

# ccp update.conf /var/opt/dsau/cfengine/inputs/

cfengine itself will take care of distributing the remaining ﬁles

cluster-wide and to all managed clients.

• Distribute the cfengine Security Keys

Since cfengine uses a public/private key exchange model to validate

the authenticity of managed clients, a key must be conﬁgured that is

associated with the relocatable IP address of the package. That

address is the one that remote clients see as the master server. Since

any cluster member can become the adoptive node, this key must be