#########################################################
#
# This is a cfservd config file - it is used for the server
# part of cfengine, for remote file transfers and control
# over cfengine using the cfrun program.
#
# comment based on http://www.delorie.com/gnu/docs/cfengine/cfengine-Tutorial_17.html
#
#########################################################
# this based on http://www.onlamp.com/pub/a/onlamp/2004/05/13/distributed_cfengine.html?page=2
groups:
cfengine_server = ( vw3.dom.com )
control:
domain = ( dom.com )
AllowUsers = ( root )
cfrunCommand = ( "/var/cfengine/bin/cfagent" )
IfElapsed = ( 0 )
ExpireAfter = ( 15 )
MaxConnections = ( 50 )
MultipleConnections = ( true )
cfengine_server::
# tcp_wrappers-like access control
AllowConnectionsFrom = (
192.168.0.0/24
206.112.12.82
)
admit:
# hosts in dom.com can access
/var/cfengine/inputs *.dom.com
/var/cfagent/bin/cfagent *.dom.com
/var/cfengine/ppkeys/localhost.pub *.dom.com
# end cfservd.conf