#########################################################
#
# This is a cfservd config file - it is used for the server
# part of cfengine, for remote file transfers and control
# over cfengine using the cfrun program.
#
# comment based on http://www.delorie.com/gnu/docs/cfengine/cfengine-Tutorial_17.html
#
#########################################################

# this based on http://www.onlamp.com/pub/a/onlamp/2004/05/13/distributed_cfengine.html?page=2
groups:
    cfengine_server = ( vw3.dom.com )

control:
    domain = ( dom.com ) 
    AllowUsers = ( root )
    cfrunCommand = ( "/var/cfengine/bin/cfagent" )
    IfElapsed = ( 0 )
    ExpireAfter = ( 15 )
    MaxConnections = ( 50 )
    MultipleConnections = ( true )

    cfengine_server::
    # tcp_wrappers-like access control
    AllowConnectionsFrom = (
        192.168.0.0/24
        206.112.12.82
    )

admit:
    # hosts in dom.com can access
    /var/cfengine/inputs                *.dom.com
    /var/cfagent/bin/cfagent            *.dom.com
    /var/cfengine/ppkeys/localhost.pub  *.dom.com

# end cfservd.conf