Bug#1041323: CFEngine agent connection errors
Package: debian-edu-config
Version: 2.12.32
There are regular failed connection attempts as follows logged:
Jul 17 12:55:43 tjener.intern cf-serverd[1031]: error: Remote host '::1' not in allowconnects, denying connection
Jul 17 12:55:43 tjener.intern cf-serverd[1031]: CFEngine(server) Remote host '::1' not in allowconnects, denying connection
Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Failed to establish TLS connection: underlying network error (Broken pipe)
Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) No suitable server found for '/var/lib/cfengine3/inputs'
Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Promise belongs to bundle 'failsafe_cfe_internal_update' in file '/var/lib/cfengine3/inputs/failsafe.cf' near line 121
Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Errors encountered when actuating files promise '/var/lib/cfengine3/inputs'
Jul 17 12:55:43 tjener.intern cf-serverd[1031]: error: Remote host '::1' not in allowconnects, denying connection
Jul 17 12:55:43 tjener.intern cf-serverd[1031]: CFEngine(server) Remote host '::1' not in allowconnects, denying connection
Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Failed to establish TLS connection: underlying network error (Broken pipe)
Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) No suitable server found for '/var/lib/cfengine3/modules'
Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Promise belongs to bundle 'failsafe_cfe_internal_update' in file '/var/lib/cfengine3/inputs/failsafe.cf' near line 130
Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Errors encountered when actuating files promise '/var/lib/cfengine3/modules'
Jul 17 12:55:43 tjener.intern cf-serverd[1031]: error: Remote host '::1' not in allowconnects, denying connection
Jul 17 12:55:43 tjener.intern cf-serverd[1031]: CFEngine(server) Remote host '::1' not in allowconnects, denying connection
Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Failed to establish TLS connection: underlying network error (Broken pipe)
Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) No suitable server found for '/var/lib/cfengine3/inputs'
Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Promise belongs to bundle 'failsafe_cfe_internal_update' in file '/var/lib/cfengine3/inputs/failsafe.cf' near line 144
Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Comment is 'If we failed to fetch policy we try again using
the legacy default in case we are fetching policy
from a hub that is not serving mastefiles via a
shortcut.'
Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Errors encountered when actuating files promise '/var/lib/cfengine3/inputs'
Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Method 'failsafe_cfe_internal_update' failed in some repairs
Jul 17 12:55:43 tjener.intern cf-serverd[1031]: error: Remote host '::1' not in allowconnects, denying connection
Jul 17 12:55:43 tjener.intern cf-serverd[1031]: CFEngine(server) Remote host '::1' not in allowconnects, denying connection
Jul 17 12:55:43 tjener.intern cf-agent[3731]: CFEngine(agent) Failed to establish TLS connection: underlying network error (Broken pipe)
Jul 17 12:55:43 tjener.intern cf-agent[3731]: CFEngine(agent) No suitable server found for '/var/lib/cfengine3/inputs/cf_promises_validated'
Jul 17 12:55:43 tjener.intern cf-agent[3731]: CFEngine(agent) Promise belongs to bundle 'cfe_internal_update_policy_cpv' in file '/var/lib/cfengine3/inputs/cfe_internal/update/update_policy.cf' near line 229
Jul 17 12:55:43 tjener.intern cf-agent[3731]: CFEngine(agent) Comment is 'Check whether a validation stamp is available for a new policy update to reduce the distributed load'
Jul 17 12:55:43 tjener.intern cf-agent[3731]: CFEngine(agent) Errors encountered when actuating files promise '/var/lib/cfengine3/inputs/cf_promises_validated'
Jul 17 12:55:43 tjener.intern cf-agent[3731]: CFEngine(agent) Method 'cfe_internal_update_policy_cpv' failed in some repairs
Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) Q: ".../cf-agent" -f /": error: Failed to establish TLS connection: underlying network error (Broken pipe)
Q: ".../cf-agent" -f /": error: No suitable server found for '/var/lib/cfengine3/inputs/cf_promises_validated'
Q: ".../cf-agent" -f /": error: Promise belongs to bundle 'cfe_internal_update_policy_cpv' in file '/var/lib/cfengine3/inputs/cfe_internal/update/update_policy.cf' near line 229
Q: ".../cf-agent" -f /": error: Comment is 'Check whether a validation stamp is available for a new policy update to reduce the distributed load'
Q: ".../cf-agent" -f /": error: Errors encountered when actuating files promise '/var/lib/cfengine3/inputs/cf_promises_validated'
Q: ".../cf-agent" -f /": error: Method 'cfe_internal_update_policy_cpv' failed in some repairs
Jul 17 12:55:43 tjener.intern cf-agent[3722]: CFEngine(agent) R: Built-in failsafe policy triggered
It seems that the agent tries to contact the server using
the IPv6 loopback address which does not seem to be allowed
by the configuration.
--
Guido Berhoerster
Reply to: