HP UX System Adstration # /sbin/init.d/cfservd start, # cfagent --no-lock --verbose --no-splay

9.The file /var/opt/dsau/cfengine_master/inputs/cfservd.conf controls which managed clients have access to the files served by cfservd on the master. Make the following edits to cfservd.conf:

•Replace the “<%CFSERVD_DOMAIN_LISTS%>“token with a comma-separated list of wildcard DNS domains or hostnames for the systems that are allowed to access this server. For example:

domain_list = ( “*.abc.xyz.com,*.cde.xyz.com“ )

This statement allows all hosts in the abc.xyz.com and cde.xyz.com domains to access the master server.

IMPORTANT: No spaces are allowed in this comma-separated list.

Prefix each domain name with the “*.” wildcard.

NOTE: The csync_wizard only supports specifying wildcard domain names in cfservd.conf. If you manually edit cfservd.conf and include a combination of specific hostnames or IP address and wildcard domains, then subsequent runs of csync_wizard will replace this line with a list of wildcard domains based on the list of hosts present in cfrun.hosts.

10.On the master server, start cfservd:

#/sbin/init.d/cfservd start

Repeat this for each managed client.

NOTE: cfservd.conf must be present in /var/opt/dsau/cfengine/inputs before executing this command.

11.Test the configuration by performing the following steps: a. On a managed client, use the command:

#cfagent --no-lock --verbose --no-splay

The verbose output will display the client checking for updated copies of the master policy files, copying them down to /var/opt/cfengine/inputs if needed, and then executing the contents of cfagent.conf/cf.main.

b.On the master server, test the cfrun command:

# cfrun -- --inform

The --informsyntax instructs the remote cfagent to use the --informflag which will produce messages for all changes cfengine performs on the system. For additional information, the --verbosecan also be helpful:

#cfrun -v -- --verbose

The -vinstructs cfrun itself to be more verbose and the --verboseis passed on to the remote cfagent.

For additional troubleshooting information, refer to “cfengine Troubleshooting” (page 39).

2.3.2.2 Manually Configuring a Serviceguard Cluster Synchronization Server

Configuring cfengine for high availability in a Serviceguard cluster is similar to configuring it for a standalone machine, which is described in the section “Using the Wizard to Configure a Standalone Synchronization Server” (page 17). The primary differences are the creation of the

2.3 Configuring cfengine 29