source: ccsd/private/templates/network/cfservd_conf.tmpl @ 1230

#*doc-module:
crcnetd - CRCnet Configuration System Daemon Template

This template controls the operation of the CFengine server
*#
#attr $author = "Matt Brown <matt@crc.net.nz>"
#attr $version = "$Id$"
#attr $copyright = "Copyright (C) 2006  The University of Waikato"
#attr $license = "No usage or redistribution rights are granted. See LICENSE for details."
#attr $eventList = []
#attr $fileName = "cfservd.conf"
#from crcnetd._utils.ccsd_cfengine import ccs_template
#extends ccs_template
#compiler-settings
## Change the Cheetah start tokens so that we don't conflict with CFengine
cheetahVarStartToken = %
directiveStartToken = !
commentStartToken = !!
#end compiler-settings
#############################################################
#
# cfservd.conf -- for %domain
# $Date$
#
# This file contains configuration for the CFengine server 
# on the central node.
#
# WARNING: Do not modify this file since it is automatically
#          generated
#
#############################################################
control:
        domain = ( %domain )

        cfrunCommand = ( "/usr/sbin/cfagent" )

        # Connecting user must be root or cfengine
        AllowUsers = ( root cfengine )

        # Allow configuration from any range known to the config system
        # XXX: May want to tighten this in future
!for %link_class_id,%link_class in %link_classes.items()        
        AllowConnectionsFrom = ( %link_class.netblock )
!end for
        # Allow multiple connections from ourself
        AllowMultipleConnectionsFrom = ( %policy_ip )

        # Trust keys from our PXEboot ranges
!! This is a hack, look for 'PXE' in the link description
!for %link_id,%link in %links.items()
    !if %link["description"].find("PXE") != -1
        # %link.description
        TrustKeysFrom = ( %link.network_address )
        DynamicAddresses = ( %link.network_address )
    !end if
!end for

any::

        IfElapsed = ( 0 )
        ExpireAfter = ( 15 )
        MaxConnections = ( 40 )
        MultipleConnections = ( true )
        LogAllConnections = ( true )

grant:

        # Grant access to all hosts that we are allowing connections from
        # Files should be world readable
!for %link_class_id,%link_class in %link_classes.items()
        /var/lib/cfengine2/inputs    %link_class.netblock
!end for

###########
#
# END cfservd.conf
#
###########