Managing Systems and Workgroups: A Guide for HP-UX System Administrators

Configuring a System
Using Distributed Systems Administration Utilities
Chapter 3182
• cfagent (see cfagent (8)) supports the --inform switch on the
command line. For more information, refer to the cfengine reference
manual in /opt/dsau/doc/cfengine.
cfengine Troubleshooting
The following are some troubleshooting hints for working with
cfengine.
1. Run cfservd on the master server using the --no-fork (-F) and the
--verbose (-v) options. This will provide useful information for any
troubleshooting efforts
2. You may see authentication errors. When performing a “cfagent -K”
operation, the following messages are displayed:
cfengine:: BAD: key could not be accepted on trust
cfengine:: Authentication dialogue with <master server>.abc.xyz.com failed
cfengine:client:/var/opt/dsau/cfengine/inputs/update.conf:194: Warning:
actionsequence is empty
cfengine:client:/var/opt/dsau/cfengine/inputs/update.conf:194: Warning: perhaps
cfagent.conf/update.conf have not yet been set up?
This problem is most likely due to the cfengine security setup. To
resolve the problem, you will need to exchange cfengine public keys
between the managed client and master server. The csync_wizard
(see csync_wizard (8)) automates this process when adding clients.
See the section “Configuring a Synchronization Managed Client” on
page 176 for instructions on manually distributing keys to managed
clients.
3. “Warning: actionsequence is empty” errors
Use the cfagent -v option to get more information. One possible
cause of this message is that update.conf has not been added to the
client’s /var/opt/dsau/cfengine/inputs directory.
4. Syntax error due to missing white space
# cfagent -K
cfengine::/var/opt/dsau/cfengine/inputs/update.conf:39: syntax error
cfengine::/var/opt/dsau/cfengine/inputs/update.conf:Execution terminated after
parsing due to errors in program