Cfengine (tested 3.2.0) installs easily on OS X (tested 10.7), given that it's Unix. One problem I encountered was that it does not compile with the bundled version of Berkeley DB (it recognizes it during configure, but produces compilation errors). The solution is to use some other DB engine. I chose Tokyo Cabinet. Using homebrew, the process is simple
brew install tokyo-cabinet
After this, configure --with-tokyocabinet, and then compile and install as usual.
I have submitted a homebrew formula for cfengine. Once/if it gets approved, you should be able to run brew install cfengine
to do all of the above automatically.
Update (2011/09/03): The cfengine homebrew formula has been accepted into the repository! You can now simply run "brew update; brew install cfengine" to get cfengine 3.2.0 installed.