Problems using class of class in cfservd

[Brian Youngstrom]

RedHat 7.1
Cfengine 2.0.3

Problem: cfservd allow: doesn't know how to handle a class defined by
   a class

*** cf.groups:
groups:
        cluster1_master = ( c1_master )
        cluster1_member = ( c1_member01 c1_member02 )

        cluster2_master = ( c2_master )
        cluster2_member = ( c2_member01 c2_member02 )

        cluster_masters = ( cluster1_master cluster2_master )

*** END cf.groups

*** cfservd.conf:
import:
        cf.groups
control:
                hostiplist = ( 127.0.0.1 1.2.3.4 1.2.3.5, 1.2.3.6, 1.2.3.7, 
1.2.3.8, 1.2.3.9)
                TrustKeysFrom = ( 1.2.3.0/24 )
                AllowConnectionsFrom = ( $(hostiplist) )
                AllowMultipleConnectionsFrom = ( $(hostiplist) )
                <...>

admit:
                cluster_masters::
                        /path/file1             *.my.domain
                        /path/file2             *.my.domain
*** END cfservd.conf

This config generates the errors
        Host authorization/authentication failed or access denied
        From (host=c1_member01,user=root,ip=1.2.3.4)

If I change the line in cfservd.conf to
"cluster1_master|cluster2_master::" all is well.

Running cfservd with -d2, I can see the classes are recognized and
added to the heap:
        AddClassToHeap(cluster_masters)
        Appending [cluster_masters]

Seems like cfservd should be able to handle the cluster_masters class
in the allow list.


Thanks for your help

-- 
Brian Youngstrom
address@hidden
University of Washington
Department of Computer Science & Engineering