Hello, I still have the same problem than I described in :
https://cfengine.org/pipermail/help-cfengine/2008-September/004053.html or than (it seems) : https://cfengine.org/pipermail/bug-cfengine/2008-July/000557.html With a machine that is not reachable, the cfrun terminates instead of continuing with the next machines in the cfrun.adminsrv ------------------------------------------------------------------------- /usr/sbin/cfrun -f cfrun.adminsrv -- -- cli_univ ... cfrun(0): .......... [ Hailing dyna.univ-nantes.fr ] .......... ... cfrun:CfEngine.cri.univ-nantes.prive: Time out of process 0 Terminated ------------------------------------------------------------------------- I have these parameters in my cfservd.conf TimeOut = ( 60 ) cfrunCommand = ( "/usr/sbin/cfagent" ) AllowUsers = ( www-data root ) LogAllConnections = ( true ) DenyBadClocks = ( false ) IfElapsed = ( 0 ) ExpireAfter = ( 15 ) MaxConnections = ( 50 ) MultipleConnections = ( true ) ------------------------------------------------------------------------- I put maxchild = 10 in the cfrun.adminsrv. ------------------------------------------------------------------------- In my case, I can't modify CF_TIMEOUT in the source of cfengine ; I installed cfengine with apt-get on debian and have no source to compile. ------------------------------------------------------------------------ Thanks for any idea. Jacky Jacky Carimalo wrote: > Hello, > > Thanks for your indication. But it didn't work in my case. > > With my cfengine2 version 2.2.6-1, when I try to hail a machine - > Proxy1.etu.univ-nantes.fr - that is down, I expected the process would > continue for another one that is alive and ok for cfrun. But all > processes stopped very quickly (even with maxchild = 10). > > Here is what I have after 10 secondes : > ######################################################### > CfEngine:/etc/cfengine/script# /usr/sbin/cfrun -f > /etc/cfengine/script/cfrun.adminsrv.test -- -- /usr/sbin/cfrun -f > /etc/cfengine/script/cfrun.adminsrv.test -- -- proxy1_etu_univ_nantes_fr > jabber_univ_nantes_fr > cfrun(0): .......... [ Hailing Proxy1.etu.univ-nantes.fr ] > .......... > cfrun(1): .......... [ Hailing jabber.univ-nantes.fr ] .......... > Terminated > > ######################################################### > Where my /etc/cfengine/script/cfrun.adminsrv.test has only one machine : > domain = cri.univ-nantes.prive > maxchild = 10 > access = root > Proxy1.etu.univ-nantes.fr > jabber.univ-nantes.fr > # End of file > ######################################################### > More precisely with debug : > > CfEngine:/etc/cfengine/script# /usr/sbin/cfrun -d2 -f > /etc/cfengine/script/cfrun.adminsrv.test -- -- /usr/sbin/cfrun -f > /etc/cfengine/script/cfrun.adminsrv.test -- -- proxy1_etu_univ_nantes_fr > jabber_univ_nantes_fr > cfrun: cfrun file = /etc/cfengine/script/cfrun.adminsrv.test > Appending [/usr/sbin/cfrun] > Appending [-f] > Appending [/etc/cfengine/script/cfrun.adminsrv.test] > Appending [--] > Appending [--] > Appending [proxy1_etu_univ_nantes_fr] > Appending [jabber_univ_nantes_fr] > CFRUNOPTIONS string: > Class item: /usr/sbin/cfrun > Class item: -f > Class item: /etc/cfengine/script/cfrun.adminsrv.test > Class item: -- > Class item: -- > Class item: proxy1_etu_univ_nantes_fr > Class item: jabber_univ_nantes_fr > Domain name = cri.univ-nantes.prive > cfrun: maxchild = 10 > Appending [Proxy1.etu.univ-nantes.fr] > Appending [jabber.univ-nantes.fr] > host item: Proxy1.etu.univ-nantes.fr () > host item: jabber.univ-nantes.fr () > GetNameInfo() > WildMatch(-,linux) > WildMatch(-,linux) > WildMatch(sunos,linux) > WildMatch(ultrix,linux) > WildMatch(hp-ux,linux) > WildMatch(aix,linux) > WildMatch(linux,linux) > WildMatch(*,i686) > WildMatch(*,2.6.18-5-vserver-686) > AddClassToHeap(linux) > Appending [linux] > AddClassToHeap(CfEngine_cri_univ_nantes_prive) > Appending [CfEngine_cri_univ_nantes_prive] > AddClassToHeap(cfengine_cri_univ_nantes_prive) > Appending [cfengine_cri_univ_nantes_prive] > Defining domain #cri.univ-nantes.prive# > AddClassToHeap(cri_univ_nantes_prive) > Appending [cri_univ_nantes_prive] > Defining domain #univ-nantes.prive# > AddClassToHeap(univ_nantes_prive) > Appending [univ_nantes_prive] > Defining domain #prive# > AddClassToHeap(prive) > Appending [prive] > AddClassToHeap(cri_univ_nantes_prive) > AddClassToHeap(CfEngine) > Appending [CfEngine] > GNU Cfengine server daemon - > 2.2.6 > Free Software Foundation 1994- > Donated by Mark Burgess, Faculty of Engineering, > Oslo University College, Norway > > ------------------------------------------------------------------------ > > Host name is: CfEngine > Operating System Type is linux > Operating System Release is 2.6.18-5-vserver-686 > Architecture = i686 > > > Using internal soft-class linux for host linux > > The time is now Fri Sep 5 16:47:29 2008 > > > ------------------------------------------------------------------------ > > AddClassToHeap(32_bit) > Appending [32_bit] > Additional hard class defined as: 32_bit > AddClassToHeap(linux_2_6_18_5_vserver_686) > Appending [linux_2_6_18_5_vserver_686] > AddClassToHeap(i686) > Appending [i686] > Additional hard class defined as: linux_2_6_18_5_vserver_686 > AddClassToHeap(linux_i686) > Appending [linux_i686] > Additional hard class defined as: linux_i686 > AddClassToHeap(linux_i686_2_6_18_5_vserver_686) > Appending [linux_i686_2_6_18_5_vserver_686] > Additional hard class defined as: linux_i686_2_6_18_5_vserver_686 > AddClassToHeap(linux_i686_2_6_18_5_vserver_686__1_SMP_Wed_Sep_26_20_10_39_UTC_2007) > Appending > [linux_i686_2_6_18_5_vserver_686__1_SMP_Wed_Sep_26_20_10_39_UTC_2007] > Additional hard class defined as: > linux_i686_2_6_18_5_vserver_686__1_SMP_Wed_Sep_26_20_10_39_UTC_2007 > AddClassToHeap(compiled_on_linux_gnu) > Appending [compiled_on_linux_gnu] > > GNU autoconf class from compile time: compiled_on_linux_gnu > > Address given by nameserver: 172.20.12.135 > Setting cfengine new port to 48148 > Setting cfengine old port to 5308 > FQNAME = CfEngine.cri.univ-nantes.prive, WORKDIR = /var/lib/cfengine2 > CheckWorkDirectories() > Directory for /var/lib/cfengine2/test exists. Okay > Directory for /var/lib/cfengine2/state/test exists. Okay > Checking integrity of the state database > Checking integrity of the module directory > Checking integrity of the input data for RPC > Checking integrity of the output data for RPC > Checking integrity of the PKI directory > Making sure that locks are private... > Loaded /var/lib/cfengine2/ppkeys/localhost.priv > Loaded /var/lib/cfengine2/ppkeys/localhost.pub > RandomSeed() work directory is /var/lib/cfengine2 > Looking for a source of entropy in /var/lib/cfengine2/randseed > cfrun(0): .......... [ Hailing Proxy1.etu.univ-nantes.fr ] > .......... > pid = 965 i = 0 > New server connection... > Connecting to server Proxy1.etu.univ-nantes.fr to port 0 with options > Using v6 compatible lookup... > cfrun(1): .......... [ Hailing jabber.univ-nantes.fr ] .......... > pid = 966 i = 1 > New server connection... > Connecting to server jabber.univ-nantes.fr to port 0 with options > Using v6 compatible lookup... > IPV4 address > sockaddr_ntop(193.52.108.47) > IPV4 address > sockaddr_ntop(193.52.101.32) > HavePublickey(root-Proxy1.etu.univ-nantes.fr) > Did not have key root-Proxy1.etu.univ-nantes.fr > HavePublickey(root-193.52.108.47) > HavePublickey(root-jabber.univ-nantes.fr) > Did not have key root-jabber.univ-nantes.fr > HavePublickey(root-193.52.101.32) > Loaded /var/lib/cfengine2/ppkeys/root-193.52.108.47.pub > Loaded /var/lib/cfengine2/ppkeys/root-193.52.101.32.pub > IPV4 address > sockaddr_ntop(193.52.108.47) > Connect to Proxy1.etu.univ-nantes.fr = 193.52.108.47 on port 5308 > IPV4 address > sockaddr_ntop(193.52.101.32) > Connect to jabber.univ-nantes.fr = 193.52.101.32 on port 5308 > IPV4 address > sockaddr_ntop(193.52.101.32) > LastSeen(jabber.univ-nantes.fr) reg > IPV4 address > sockaddr_ntop(193.52.101.32) > Found address (193.52.101.32) for host jabber.univ-nantes.fr > GetMacroValue(cfrun,LastSeenExpireAfter) > GetMacroValue(cfrun,LastSeenExpireAfter): using scope 'cfrun' for > variable 'LastSeenExpireAfter' > StringKEY => +193.52.101.32 > READ +193.52.101.32 > StringKEY => +193.52.101.32 > StringKEY => Fri:Hr16:Min45_50 > IPV4 address > sockaddr_ntop(172.20.12.135) > Identifying this agent as 172.20.12.135 i.e. > CfEngine.cri.univ-nantes.prive, with signature 0 > IsIPV6Address(CfEngine.cri.univ-nantes.prive) > SENT:::CAUTH 172.20.12.135 CfEngine.cri.univ-nantes.prive root 0 > Transaction Send[t 57][Packed text] > Attempting to send 65 bytes > SendSocketStream, sent 65 > ChecksumString(m) > OptionIs(cfrun,HostnameKeys,1) > GetMacroValue(cfrun,HostnameKeys) > GetMacroValue(cfrun,HostnameKeys): using scope 'cfrun' for variable > 'HostnameKeys' > KeyAuthentication(with IP keyname root-193.52.101.32) > HavePublickey(root-193.52.101.32) > Loaded /var/lib/cfengine2/ppkeys/root-193.52.101.32.pub > Transaction Send[t 280][Packed text] > Attempting to send 288 bytes > SendSocketStream, sent 288 > Modulus (2048 bit): > 00:ad:0e:80:23:e2:a9:70:5a:a9:5f:6c:f9:80:ab: > 51:c9:51:7b:27:11:b9:9d:bf:a7:31:37:cd:2a:50: > 64:32:3f:55:13:04:8a:43:82:e5:5b:7b:2d:ee:07: > 6c:99:6d:01:4a:9a:44:52:55:4d:45:8e:39:c4:99: > d5:0b:23:c2:56:72:de:27:53:91:36:79:14:af:c8: > 7e:3b:8f:f3:7c:7c:20:34:c2:0d:0c:16:2c:80:ac: > c4:77:b1:f6:ce:d1:07:7b:0c:9f:33:6e:9a:08:fd: > 4d:c6:e2:34:0c:01:20:49:2e:7b:57:0a:12:6f:51: > 41:8c:d6:54:55:cd:5c:bd:dd:55:b1:fe:4d:6f:a6: > 27:6c:2c:89:b1:cd:e2:f0:df:23:ac:e3:f7:ba:3c: > c3:99:cf:8e:72:fc:50:5b:dc:ce:13:07:42:f9:b4: > 70:d8:33:3d:c7:b3:2b:54:a6:93:32:40:53:2f:cc: > ed:2a:df:dc:cc:22:25:73:5c:c0:8d:f4:7c:d9:ea: > 36:bf:42:23:2e:d2:22:e5:84:4a:bc:0d:d7:22:91: > bb:7a:fc:79:68:1e:cf:97:40:0b:fd:13:37:b4:73: > 16:da:de:72:69:9a:bd:07:15:8a:3e:df:7f:fc:90: > 2d:2c:8b:e1:07:bc:96:d7:c2:d6:73:86:78:c3:39: > 2f:ff > Exponent: 35 (0x23) > Transaction Send[t 261][Packed text] > Attempting to send 269 bytes > SendSocketStream, sent 269 > Transaction Send[t 5][Packed text] > Attempting to send 13 bytes > SendSocketStream, sent 13 > RecvSocketStream(8) > (Concatenated 8 from stream) > Transaction Receive [t 16][] > RecvSocketStream(16) > (Concatenated 16 from stream) > Protoreply: (OK: key accepted) > RecvSocketStream(8) > (Concatenated 8 from stream) > Transaction Receive [t 16][] > RecvSocketStream(16) > (Concatenated 16 from stream) > ExpandVarstring( jabber.univ-nantes.fr ) > Add |jabber.univ-nantes.fr| to str, waiting at || > Returning varstring (jabber.univ-nantes.fr) > > ............................................................... > cfrun:CfEngine.cri.univ-nantes.prive: Strong authentication of > server=jabber.univ-nantes.fr connection confirmed > Receive counter challenge from server > RecvSocketStream(8) > (Concatenated 8 from stream) > Transaction Receive [t 256][] > RecvSocketStream(256) > (Concatenated 256 from stream) > ChecksumString(m) > Replying to counter challenge with md5 > Transaction Send[t 16][Packed text] > Attempting to send 24 bytes > SendSocketStream, sent 24 > BinaryBuffer(16)[1876198100010000000] = 16 > Generated session key > BinaryBuffer(16)[1876198100010000000] = 16 > BinaryBuffer(16)[1876198100010000000] = 16 > Encrypt 16 to 256 > Encryption succeeded > Transaction Send[t 256][Packed text] > Attempting to send 264 bytes > SendSocketStream, sent 264 > BinaryBuffer(256)[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! 45057ffffff9dffffffd3fffffff4ffffffb9ffffff86fffffffdfffffff9ffffffa852aaffffffdb427ffffffffaffffffb9ffffff94ffffffc7566567174797944ffffffa3fffffff0ffffffb66666ffffffbaffffff824718ffffffbbffffff9cffffffd2affffffd742bffffff8fffffffb7ffffffb84147ffffffe5ffffffbd60ffffffb256dfffffff5] > = 256 > Transaction Send[t 6][Packed text] > Attempting to send 14 bytes > SendSocketStream, sent 14 > Transaction Send[t 141][Packed text] > Attempting to send 149 bytes > SendSocketStream, sent 149 > jabber.univ-nantes.fr replies.. > > RecvSocketStream(8) > cfrun:CfEngine.cri.univ-nantes.prive: Time out of process 0 > Terminated > ######################################################### > Thanks for any help if someone knows how I can do having my cfrun not > terminated for all machines, when only a machine is on error hailing it. > > Jacky > > concatenate wrote: > >> On Thu, Sep 4, 2008 at 7:14 AM, Jacky Carimalo >> <[email protected] <mailto:[email protected]>> >> wrote: >> >> Hello, >> >> I run cfrun - cfengine2 version 2.2.6-1 - on more than 260 machines. >> >> I have a problem when there is one machine in the cfrun.hosts where >> cfengine doesn't answer : cfrun waits undefinitly. >> >> I would like cfengine could continue with the next machines in the >> list. >> >> Do you know what is it to do to have this behavior, and not the cfrun >> blocked ? >> >> >> >> Not a fix, but a workaround: I just increased maxchild in cfrun.hosts >> until the number of hosts that tend to hang aren't enough to tie up >> all the concurrent cfrun connections. >> >> maxchild=50 >> >> Then I go back through the output and figure out if I need to remove >> dead hosts from cfrun.hosts or fix the broken ones. >> >> Note that I don't have production on the 2.2 branch yet, though, it's >> 2.1.2something. >> >> ------------------------------------------------------------------------ >> >> _______________________________________________ >> Help-cfengine mailing list >> [email protected] >> https://cfengine.org/mailman/listinfo/help-cfengine >> >> > > > _______________________________________________ Bug-cfengine mailing list [email protected] https://cfengine.org/mailman/listinfo/bug-cfengine
