Unknown
2010-Jul-26 18:29 UTC
[Puppet Users] Can''t get simplest client / server connection to work still
I''ve triple-checked that I''m restarting the server after changing the config. I''m sure I have been all along; in any case the latest test fails just like the others, with err: Could not retrieve catalog from remote server: hostname not match with the server certificate Just out of curiosity, which hostname (client or server), what is its current value (is this in the debug output somewhere?), and what is the name on the server certificate? (The debug output shows references to prc-mn-lnx01.pinerivercapital.local certificates; but I can''t tell if the copy they are referring to is on the client or on the server; the directory structures are the same on both.) Is the hostname anywhere except in the actual certificate file names? All those are what I would expect, I don''t see any mismatches. I don''t see additional information in this --debug output, but in case somebody else might, here it is: [root@prc-mn-lnx01 ~]# puppetd --server prc-mn-lnx03 --test --debug debug: Puppet::Type::User::ProviderLdap: true value when expecting false debug: Puppet::Type::User::ProviderUser_role_add: file roleadd does not exist debug: Puppet::Type::User::ProviderPw: file pw does not exist debug: Puppet::Type::User::ProviderDirectoryservice: file /usr/bin/ dscl does not exist debug: /File[/var/lib/puppet/state/graphs]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/state/graphs debug: /File[/var/lib/puppet/state/graphs]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/state/graphs debug: /File[/var/lib/puppet/state/graphs]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/state/graphs debug: /File[/var/lib/puppet/client_yaml]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/client_yaml debug: /File[/var/lib/puppet/client_yaml]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/client_yaml debug: /File[/var/lib/puppet/client_yaml]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/client_yaml debug: /File[/var/log/puppet/http.log]/seluser: Found seluser default ''system_u'' for /var/log/puppet/http.log debug: /File[/var/log/puppet/http.log]/selrole: Found selrole default ''object_r'' for /var/log/puppet/http.log debug: /File[/var/log/puppet/http.log]/seltype: Found seltype default ''var_log_t'' for /var/log/puppet/http.log debug: /File[/etc/puppet]/seluser: Found seluser default ''system_u'' for /etc/puppet debug: /File[/etc/puppet]/selrole: Found selrole default ''object_r'' for /etc/puppet debug: /File[/etc/puppet]/seltype: Found seltype default ''etc_t'' for / etc/puppet debug: /File[/var/lib/puppet/lib]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/lib debug: /File[/var/lib/puppet/lib]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/lib debug: /File[/var/lib/puppet/lib]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/lib debug: /File[/var/lib/puppet/ssl/certificate_requests]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl/ certificate_requests debug: /File[/var/lib/puppet/ssl/certificate_requests]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl/ certificate_requests debug: /File[/var/lib/puppet/ssl/certificate_requests]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl/ certificate_requests debug: /File[/var/log/puppet]/seluser: Found seluser default ''system_u'' for /var/log/puppet debug: /File[/var/log/puppet]/selrole: Found selrole default ''object_r'' for /var/log/puppet debug: /File[/var/log/puppet]/seltype: Found seltype default ''var_log_t'' for /var/log/puppet debug: /File[/etc/puppet/puppet.conf]/seluser: Found seluser default ''system_u'' for /etc/puppet/puppet.conf debug: /File[/etc/puppet/puppet.conf]/selrole: Found selrole default ''object_r'' for /etc/puppet/puppet.conf debug: /File[/etc/puppet/puppet.conf]/seltype: Found seltype default ''etc_t'' for /etc/puppet/puppet.conf debug: /File[/var/lib/puppet/ssl/certs]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl/certs debug: /File[/var/lib/puppet/ssl/certs]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl/certs debug: /File[/var/lib/puppet/ssl/certs]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl/certs debug: /File[/var/lib/puppet/facts]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/facts debug: /File[/var/lib/puppet/facts]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/facts debug: /File[/var/lib/puppet/facts]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/facts debug: /File[/var/lib/puppet]/seluser: Found seluser default ''system_u'' for /var/lib/puppet debug: /File[/var/lib/puppet]/selrole: Found selrole default ''object_r'' for /var/lib/puppet debug: /File[/var/lib/puppet]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet debug: /File[/var/lib/puppet/ssl/certs/ca.pem]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl/certs/ca.pem debug: /File[/var/lib/puppet/ssl/certs/ca.pem]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl/certs/ca.pem debug: /File[/var/lib/puppet/ssl/certs/ca.pem]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl/certs/ca.pem debug: /File[/var/lib/puppet/ssl/certs/prc-mn- lnx01.pinerivercapital.local.pem]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl/certs/prc-\ mn-lnx01.pinerivercapital.local.pem debug: /File[/var/lib/puppet/ssl/certs/prc-mn- lnx01.pinerivercapital.local.pem]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl/certs/prc-\ mn-lnx01.pinerivercapital.local.pem debug: /File[/var/lib/puppet/ssl/certs/prc-mn- lnx01.pinerivercapital.local.pem]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl/certs/prc\ -mn-lnx01.pinerivercapital.local.pem debug: /File[/var/lib/puppet/clientbucket]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/clientbucket debug: /File[/var/lib/puppet/clientbucket]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/clientbucket debug: /File[/var/lib/puppet/clientbucket]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/clientbucket debug: /File[/var/lib/puppet/ssl/public_keys/prc-mn- lnx01.pinerivercapital.local.pem]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl/publ\ ic_keys/prc-mn-lnx01.pinerivercapital.local.pem debug: /File[/var/lib/puppet/ssl/public_keys/prc-mn- lnx01.pinerivercapital.local.pem]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl/publ\ ic_keys/prc-mn-lnx01.pinerivercapital.local.pem debug: /File[/var/lib/puppet/ssl/public_keys/prc-mn- lnx01.pinerivercapital.local.pem]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl/pub\ lic_keys/prc-mn-lnx01.pinerivercapital.local.pem debug: /File[/var/lib/puppet/ssl]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl debug: /File[/var/lib/puppet/ssl]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl debug: /File[/var/lib/puppet/ssl]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl debug: /File[/var/lib/puppet/ssl/private_keys/prc-mn- lnx01.pinerivercapital.local.pem]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl/pri\ vate_keys/prc-mn-lnx01.pinerivercapital.local.pem debug: /File[/var/lib/puppet/ssl/private_keys/prc-mn- lnx01.pinerivercapital.local.pem]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl/pri\ vate_keys/prc-mn-lnx01.pinerivercapital.local.pem debug: /File[/var/lib/puppet/ssl/private_keys/prc-mn- lnx01.pinerivercapital.local.pem]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl/pr\ ivate_keys/prc-mn-lnx01.pinerivercapital.local.pem debug: /File[/var/lib/puppet/ssl/private]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl/private debug: /File[/var/lib/puppet/ssl/private]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl/private debug: /File[/var/lib/puppet/ssl/private]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl/private debug: /File[/var/lib/puppet/ssl/public_keys]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl/public_keys debug: /File[/var/lib/puppet/ssl/public_keys]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl/public_keys debug: /File[/var/lib/puppet/ssl/public_keys]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl/public_keys debug: /File[/var/lib/puppet/ssl/private_keys]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl/private_keys debug: /File[/var/lib/puppet/ssl/private_keys]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl/private_keys debug: /File[/var/lib/puppet/ssl/private_keys]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl/private_keys debug: /File[/var/lib/puppet/state]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/state debug: /File[/var/lib/puppet/state]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/state debug: /File[/var/lib/puppet/state]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/state debug: /File[/var/run/puppet]/seluser: Found seluser default ''system_u'' for /var/run/puppet debug: /File[/var/run/puppet]/selrole: Found selrole default ''object_r'' for /var/run/puppet debug: /File[/var/run/puppet]/seltype: Found seltype default ''var_run_t'' for /var/run/puppet debug: Failed to load library ''ldap'' for feature ''ldap'' debug: /File[/etc/puppet/puppet.conf]: Autorequiring File[/etc/puppet] debug: /File[/var/lib/puppet/ssl]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/client_yaml]: Autorequiring File[/var/lib/ puppet] debug: /File[/var/lib/puppet/ssl/public_keys/prc-mn- lnx01.pinerivercapital.local.pem]: Autorequiring File[/var/lib/puppet/ ssl/public_keys] debug: /File[/var/lib/puppet/facts]: Autorequiring File[/var/lib/ puppet] debug: /File[/var/lib/puppet/clientbucket]: Autorequiring File[/var/ lib/puppet] debug: /File[/var/lib/puppet/state/graphs]: Autorequiring File[/var/ lib/puppet/state] debug: /File[/var/lib/puppet/ssl/certificate_requests]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/ssl/public_keys]: Autorequiring File[/var/ lib/puppet/ssl] debug: /File[/var/lib/puppet/state]: Autorequiring File[/var/lib/ puppet] debug: /File[/var/lib/puppet/ssl/certs/prc-mn- lnx01.pinerivercapital.local.pem]: Autorequiring File[/var/lib/puppet/ ssl/certs] debug: /File[/var/lib/puppet/ssl/private]: Autorequiring File[/var/lib/ puppet/ssl] debug: /File[/var/log/puppet/http.log]: Autorequiring File[/var/log/ puppet] debug: /File[/var/lib/puppet/lib]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/ssl/certs]: Autorequiring File[/var/lib/ puppet/ssl] debug: /File[/var/lib/puppet/ssl/certs/ca.pem]: Autorequiring File[/ var/lib/puppet/ssl/certs] debug: /File[/var/lib/puppet/ssl/private_keys/prc-mn- lnx01.pinerivercapital.local.pem]: Autorequiring File[/var/lib/puppet/ ssl/private_keys] debug: /File[/var/lib/puppet/ssl/private_keys]: Autorequiring File[/ var/lib/puppet/ssl] debug: Finishing transaction 23670146489180 with 0 changes debug: /File[/var/lib/puppet/ssl]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl debug: /File[/var/lib/puppet/ssl]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl debug: /File[/var/lib/puppet/ssl]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl debug: /File[/var/log/puppet/http.log]/seluser: Found seluser default ''system_u'' for /var/log/puppet/http.log debug: /File[/var/log/puppet/http.log]/selrole: Found selrole default ''object_r'' for /var/log/puppet/http.log debug: /File[/var/log/puppet/http.log]/seltype: Found seltype default ''var_log_t'' for /var/log/puppet/http.log debug: /File[/var/lib/puppet/ssl/private_keys]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl/private_keys debug: /File[/var/lib/puppet/ssl/private_keys]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl/private_keys debug: /File[/var/lib/puppet/ssl/private_keys]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl/private_keys debug: /File[/var/lib/puppet/state]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/state debug: /File[/var/lib/puppet/state]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/state debug: /File[/var/lib/puppet/state]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/state debug: /File[/var/lib/puppet/ssl/certificate_requests]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl/ certificate_requests debug: /File[/var/lib/puppet/ssl/certificate_requests]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl/ certificate_requests debug: /File[/var/lib/puppet/ssl/certificate_requests]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl/ certificate_requests debug: /File[/var/lib/puppet/lib]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/lib debug: /File[/var/lib/puppet/lib]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/lib debug: /File[/var/lib/puppet/lib]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/lib debug: /File[/var/lib/puppet/ssl/certs/prc-mn- lnx01.pinerivercapital.local.pem]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl/certs/prc-\ mn-lnx01.pinerivercapital.local.pem debug: /File[/var/lib/puppet/ssl/certs/prc-mn- lnx01.pinerivercapital.local.pem]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl/certs/prc-\ mn-lnx01.pinerivercapital.local.pem debug: /File[/var/lib/puppet/ssl/certs/prc-mn- lnx01.pinerivercapital.local.pem]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl/certs/prc\ -mn-lnx01.pinerivercapital.local.pem debug: /File[/var/lib/puppet/ssl/private]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl/private debug: /File[/var/lib/puppet/ssl/private]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl/private debug: /File[/var/lib/puppet/ssl/private]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl/private debug: /File[/var/lib/puppet/ssl/private_keys/prc-mn- lnx01.pinerivercapital.local.pem]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl/pri\ vate_keys/prc-mn-lnx01.pinerivercapital.local.pem debug: /File[/var/lib/puppet/ssl/private_keys/prc-mn- lnx01.pinerivercapital.local.pem]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl/pri\ vate_keys/prc-mn-lnx01.pinerivercapital.local.pem debug: /File[/var/lib/puppet/ssl/private_keys/prc-mn- lnx01.pinerivercapital.local.pem]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl/pr\ ivate_keys/prc-mn-lnx01.pinerivercapital.local.pem debug: /File[/var/run/puppet]/seluser: Found seluser default ''system_u'' for /var/run/puppet debug: /File[/var/run/puppet]/selrole: Found selrole default ''object_r'' for /var/run/puppet debug: /File[/var/run/puppet]/seltype: Found seltype default ''var_run_t'' for /var/run/puppet debug: /File[/var/lib/puppet]/seluser: Found seluser default ''system_u'' for /var/lib/puppet debug: /File[/var/lib/puppet]/selrole: Found selrole default ''object_r'' for /var/lib/puppet debug: /File[/var/lib/puppet]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet debug: /File[/var/lib/puppet/ssl/certs/ca.pem]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl/certs/ca.pem debug: /File[/var/lib/puppet/ssl/certs/ca.pem]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl/certs/ca.pem debug: /File[/var/lib/puppet/ssl/certs/ca.pem]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl/certs/ca.pem debug: /File[/var/log/puppet]/seluser: Found seluser default ''system_u'' for /var/log/puppet debug: /File[/var/log/puppet]/selrole: Found selrole default ''object_r'' for /var/log/puppet debug: /File[/var/log/puppet]/seltype: Found seltype default ''var_log_t'' for /var/log/puppet debug: /File[/var/lib/puppet/ssl/certs]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl/certs debug: /File[/var/lib/puppet/ssl/certs]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl/certs debug: /File[/var/lib/puppet/ssl/certs]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl/certs debug: /File[/var/lib/puppet/facts]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/facts debug: /File[/var/lib/puppet/facts]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/facts debug: /File[/var/lib/puppet/facts]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/facts debug: /File[/var/lib/puppet/ssl/public_keys]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl/public_keys debug: /File[/var/lib/puppet/ssl/public_keys]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl/public_keys debug: /File[/var/lib/puppet/ssl/public_keys]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl/public_keys debug: /File[/etc/puppet]/seluser: Found seluser default ''system_u'' for /etc/puppet debug: /File[/etc/puppet]/selrole: Found selrole default ''object_r'' for /etc/puppet debug: /File[/etc/puppet]/seltype: Found seltype default ''etc_t'' for / etc/puppet debug: /File[/var/lib/puppet/ssl/public_keys/prc-mn- lnx01.pinerivercapital.local.pem]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/ssl/publ\ ic_keys/prc-mn-lnx01.pinerivercapital.local.pem debug: /File[/var/lib/puppet/ssl/public_keys/prc-mn- lnx01.pinerivercapital.local.pem]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/ssl/publ\ ic_keys/prc-mn-lnx01.pinerivercapital.local.pem debug: /File[/var/lib/puppet/ssl/public_keys/prc-mn- lnx01.pinerivercapital.local.pem]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/ssl/pub\ lic_keys/prc-mn-lnx01.pinerivercapital.local.pem debug: /File[/var/lib/puppet/state]: Autorequiring File[/var/lib/ puppet] debug: /File[/var/lib/puppet/lib]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/ssl/certs/prc-mn- lnx01.pinerivercapital.local.pem]: Autorequiring File[/var/lib/puppet/ ssl/certs] debug: /File[/var/lib/puppet/ssl/private_keys/prc-mn- lnx01.pinerivercapital.local.pem]: Autorequiring File[/var/lib/puppet/ ssl/private_keys] debug: /File[/var/lib/puppet/ssl/certs]: Autorequiring File[/var/lib/ puppet/ssl] debug: /File[/var/lib/puppet/facts]: Autorequiring File[/var/lib/ puppet] debug: /File[/var/lib/puppet/ssl/certificate_requests]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/ssl/certs/ca.pem]: Autorequiring File[/ var/lib/puppet/ssl/certs] debug: /File[/var/lib/puppet/ssl/public_keys]: Autorequiring File[/var/ lib/puppet/ssl] debug: /File[/var/lib/puppet/ssl/public_keys/prc-mn- lnx01.pinerivercapital.local.pem]: Autorequiring File[/var/lib/puppet/ ssl/public_keys] debug: /File[/var/log/puppet/http.log]: Autorequiring File[/var/log/ puppet] debug: /File[/var/lib/puppet/ssl/private_keys]: Autorequiring File[/ var/lib/puppet/ssl] debug: /File[/var/lib/puppet/ssl]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/ssl/private]: Autorequiring File[/var/lib/ puppet/ssl] debug: Finishing transaction 23670146763060 with 0 changes debug: Using cached certificate for ca debug: Using cached certificate for prc-mn- lnx01.pinerivercapital.local debug: /File[/var/lib/puppet/client_yaml]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/client_yaml debug: /File[/var/lib/puppet/client_yaml]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/client_yaml debug: /File[/var/lib/puppet/client_yaml]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/client_yaml debug: /File[/var/lib/puppet/clientbucket]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/clientbucket debug: /File[/var/lib/puppet/clientbucket]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/clientbucket debug: /File[/var/lib/puppet/clientbucket]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/clientbucket debug: /File[/var/lib/puppet/state/graphs]/seluser: Found seluser default ''system_u'' for /var/lib/puppet/state/graphs debug: /File[/var/lib/puppet/state/graphs]/selrole: Found selrole default ''object_r'' for /var/lib/puppet/state/graphs debug: /File[/var/lib/puppet/state/graphs]/seltype: Found seltype default ''var_lib_t'' for /var/lib/puppet/state/graphs debug: /File[/etc/puppet/puppet.conf]/seluser: Found seluser default ''system_u'' for /etc/puppet/puppet.conf debug: /File[/etc/puppet/puppet.conf]/selrole: Found selrole default ''object_r'' for /etc/puppet/puppet.conf debug: /File[/etc/puppet/puppet.conf]/seltype: Found seltype default ''etc_t'' for /etc/puppet/puppet.conf debug: Finishing transaction 23670146198020 with 0 changes debug: Using cached certificate for ca debug: Using cached certificate for prc-mn- lnx01.pinerivercapital.local err: Could not retrieve catalog from remote server: hostname not match with the server certificate warning: Not using cache on failed catalog err: Could not retrieve catalog; skipping run [root@prc-mn-lnx01 ~]# -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
DaveQB
2010-Jul-26 23:27 UTC
[Puppet Users] Re: Can''t get simplest client / server connection to work still
Try messing with the: certname value in the [puppetd] Stanza. Other than that, there is a way to see what the name on the cert is. I have used that but can''t recall the openssl command for that. Search for it. On Jul 27, 4:29 am, "WEB PAGE: http://www.dyarstraights.com (08/14/04) WEB PAGE: http://www.livejournal.com/users/allyson13/ (08/14/04) David Dyer-Bennet 11/30/04 Minneapolis, Minnesota Address(es):" <d...@dd- b.net> wrote:> I''ve triple-checked that I''m restarting the server after changing the > config. I''m sure I have been all along; in any case the latest test > fails just like the others, with > > err: Could not retrieve catalog from remote server: hostname not match > with the server certificate > > Just out of curiosity, which hostname (client or server), what is its > current value (is this in the debug output somewhere?), and what is > the name on the server certificate? (The debug output shows > references to prc-mn-lnx01.pinerivercapital.local certificates; but I > can''t tell if the copy they are referring to is on the client or on > the server; the directory structures are the same on both.) > > Is the hostname anywhere except in the actual certificate file names? > All those are what I would expect, I don''t see any mismatches. > > I don''t see additional information in this --debug output, but in case > somebody else might, here it is: > > [root@prc-mn-lnx01 ~]# puppetd --server prc-mn-lnx03 --test --debug > debug: Puppet::Type::User::ProviderLdap: true value when expecting > false > debug: Puppet::Type::User::ProviderUser_role_add: file roleadd does > not exist > debug: Puppet::Type::User::ProviderPw: file pw does not exist > debug: Puppet::Type::User::ProviderDirectoryservice: file /usr/bin/ > dscl does not exist > debug: /File[/var/lib/puppet/state/graphs]/seluser: Found seluser > default ''system_u'' for /var/lib/puppet/state/graphs > debug: /File[/var/lib/puppet/state/graphs]/selrole: Found selrole > default ''object_r'' for /var/lib/puppet/state/graphs > debug: /File[/var/lib/puppet/state/graphs]/seltype: Found seltype > default ''var_lib_t'' for /var/lib/puppet/state/graphs > debug: /File[/var/lib/puppet/client_yaml]/seluser: Found seluser > default ''system_u'' for /var/lib/puppet/client_yaml > debug: /File[/var/lib/puppet/client_yaml]/selrole: Found selrole > default ''object_r'' for /var/lib/puppet/client_yaml > debug: /File[/var/lib/puppet/client_yaml]/seltype: Found seltype > default ''var_lib_t'' for /var/lib/puppet/client_yaml > debug: /File[/var/log/puppet/http.log]/seluser: Found seluser default > ''system_u'' for /var/log/puppet/http.log > debug: /File[/var/log/puppet/http.log]/selrole: Found selrole default > ''object_r'' for /var/log/puppet/http.log > debug: /File[/var/log/puppet/http.log]/seltype: Found seltype default > ''var_log_t'' for /var/log/puppet/http.log > debug: /File[/etc/puppet]/seluser: Found seluser default ''system_u'' > for /etc/puppet > debug: /File[/etc/puppet]/selrole: Found selrole default ''object_r'' > for /etc/puppet > debug: /File[/etc/puppet]/seltype: Found seltype default ''etc_t'' for / > etc/puppet > debug: /File[/var/lib/puppet/lib]/seluser: Found seluser default > ''system_u'' for /var/lib/puppet/lib > debug: /File[/var/lib/puppet/lib]/selrole: Found selrole default > ''object_r'' for /var/lib/puppet/lib > debug: /File[/var/lib/puppet/lib]/seltype: Found seltype default > ''var_lib_t'' for /var/lib/puppet/lib > debug: /File[/var/lib/puppet/ssl/certificate_requests]/seluser: Found > seluser default ''system_u'' for /var/lib/puppet/ssl/ > certificate_requests > debug: /File[/var/lib/puppet/ssl/certificate_requests]/selrole: Found > selrole default ''object_r'' for /var/lib/puppet/ssl/ > certificate_requests > debug: /File[/var/lib/puppet/ssl/certificate_requests]/seltype: Found > seltype default ''var_lib_t'' for /var/lib/puppet/ssl/ > certificate_requests > debug: /File[/var/log/puppet]/seluser: Found seluser default > ''system_u'' for /var/log/puppet > debug: /File[/var/log/puppet]/selrole: Found selrole default > ''object_r'' for /var/log/puppet > debug: /File[/var/log/puppet]/seltype: Found seltype default > ''var_log_t'' for /var/log/puppet > debug: /File[/etc/puppet/puppet.conf]/seluser: Found seluser default > ''system_u'' for /etc/puppet/puppet.conf > debug: /File[/etc/puppet/puppet.conf]/selrole: Found selrole default > ''object_r'' for /etc/puppet/puppet.conf > debug: /File[/etc/puppet/puppet.conf]/seltype: Found seltype default > ''etc_t'' for /etc/puppet/puppet.conf > debug: /File[/var/lib/puppet/ssl/certs]/seluser: Found seluser default > ''system_u'' for /var/lib/puppet/ssl/certs > debug: /File[/var/lib/puppet/ssl/certs]/selrole: Found selrole default > ''object_r'' for /var/lib/puppet/ssl/certs > debug: /File[/var/lib/puppet/ssl/certs]/seltype: Found seltype default > ''var_lib_t'' for /var/lib/puppet/ssl/certs > debug: /File[/var/lib/puppet/facts]/seluser: Found seluser default > ''system_u'' for /var/lib/puppet/facts > debug: /File[/var/lib/puppet/facts]/selrole: Found selrole default > ''object_r'' for /var/lib/puppet/facts > debug: /File[/var/lib/puppet/facts]/seltype: Found seltype default > ''var_lib_t'' for /var/lib/puppet/facts > debug: /File[/var/lib/puppet]/seluser: Found seluser default > ''system_u'' for /var/lib/puppet > debug: /File[/var/lib/puppet]/selrole: Found selrole default > ''object_r'' for /var/lib/puppet > debug: /File[/var/lib/puppet]/seltype: Found seltype default > ''var_lib_t'' for /var/lib/puppet > debug: /File[/var/lib/puppet/ssl/certs/ca.pem]/seluser: Found seluser > default ''system_u'' for /var/lib/puppet/ssl/certs/ca.pem > debug: /File[/var/lib/puppet/ssl/certs/ca.pem]/selrole: Found selrole > default ''object_r'' for /var/lib/puppet/ssl/certs/ca.pem > debug: /File[/var/lib/puppet/ssl/certs/ca.pem]/seltype: Found seltype > default ''var_lib_t'' for /var/lib/puppet/ssl/certs/ca.pem > debug: /File[/var/lib/puppet/ssl/certs/prc-mn- > lnx01.pinerivercapital.local.pem]/seluser: Found seluser default > ''system_u'' for /var/lib/puppet/ssl/certs/prc-\ > mn-lnx01.pinerivercapital.local.pem > debug: /File[/var/lib/puppet/ssl/certs/prc-mn- > lnx01.pinerivercapital.local.pem]/selrole: Found selrole default > ''object_r'' for /var/lib/puppet/ssl/certs/prc-\ > mn-lnx01.pinerivercapital.local.pem > debug: /File[/var/lib/puppet/ssl/certs/prc-mn- > lnx01.pinerivercapital.local.pem]/seltype: Found seltype default > ''var_lib_t'' for /var/lib/puppet/ssl/certs/prc\ > -mn-lnx01.pinerivercapital.local.pem > debug: /File[/var/lib/puppet/clientbucket]/seluser: Found seluser > default ''system_u'' for /var/lib/puppet/clientbucket > debug: /File[/var/lib/puppet/clientbucket]/selrole: Found selrole > default ''object_r'' for /var/lib/puppet/clientbucket > debug: /File[/var/lib/puppet/clientbucket]/seltype: Found seltype > default ''var_lib_t'' for /var/lib/puppet/clientbucket > debug: /File[/var/lib/puppet/ssl/public_keys/prc-mn- > lnx01.pinerivercapital.local.pem]/seluser: Found seluser default > ''system_u'' for /var/lib/puppet/ssl/publ\ > ic_keys/prc-mn-lnx01.pinerivercapital.local.pem > debug: /File[/var/lib/puppet/ssl/public_keys/prc-mn- > lnx01.pinerivercapital.local.pem]/selrole: Found selrole default > ''object_r'' for /var/lib/puppet/ssl/publ\ > ic_keys/prc-mn-lnx01.pinerivercapital.local.pem > debug: /File[/var/lib/puppet/ssl/public_keys/prc-mn- > lnx01.pinerivercapital.local.pem]/seltype: Found seltype default > ''var_lib_t'' for /var/lib/puppet/ssl/pub\ > lic_keys/prc-mn-lnx01.pinerivercapital.local.pem > debug: /File[/var/lib/puppet/ssl]/seluser: Found seluser default > ''system_u'' for /var/lib/puppet/ssl > debug: /File[/var/lib/puppet/ssl]/selrole: Found selrole default > ''object_r'' for /var/lib/puppet/ssl > debug: /File[/var/lib/puppet/ssl]/seltype: Found seltype default > ''var_lib_t'' for /var/lib/puppet/ssl > debug: /File[/var/lib/puppet/ssl/private_keys/prc-mn- > lnx01.pinerivercapital.local.pem]/seluser: Found seluser default > ''system_u'' for /var/lib/puppet/ssl/pri\ > vate_keys/prc-mn-lnx01.pinerivercapital.local.pem > debug: /File[/var/lib/puppet/ssl/private_keys/prc-mn- > lnx01.pinerivercapital.local.pem]/selrole: Found selrole default > ''object_r'' for /var/lib/puppet/ssl/pri\ > vate_keys/prc-mn-lnx01.pinerivercapital.local.pem > debug: /File[/var/lib/puppet/ssl/private_keys/prc-mn- > lnx01.pinerivercapital.local.pem]/seltype: Found seltype default > ''var_lib_t'' for /var/lib/puppet/ssl/pr\ > ivate_keys/prc-mn-lnx01.pinerivercapital.local.pem > debug: /File[/var/lib/puppet/ssl/private]/seluser: Found seluser > default ''system_u'' for /var/lib/puppet/ssl/private > debug: /File[/var/lib/puppet/ssl/private]/selrole: Found selrole > default ''object_r'' for /var/lib/puppet/ssl/private > debug: /File[/var/lib/puppet/ssl/private]/seltype: Found seltype > default ''var_lib_t'' for /var/lib/puppet/ssl/private > debug: /File[/var/lib/puppet/ssl/public_keys]/seluser: Found seluser > default ''system_u'' for /var/lib/puppet/ssl/public_keys > debug: /File[/var/lib/puppet/ssl/public_keys]/selrole: Found selrole > default ''object_r'' for /var/lib/puppet/ssl/public_keys > debug: /File[/var/lib/puppet/ssl/public_keys]/seltype: Found seltype > default ''var_lib_t'' for /var/lib/puppet/ssl/public_keys > debug: /File[/var/lib/puppet/ssl/private_keys]/seluser: Found seluser > default ''system_u'' for /var/lib/puppet/ssl/private_keys > debug: /File[/var/lib/puppet/ssl/private_keys]/selrole: Found selrole > default ''object_r'' for /var/lib/puppet/ssl/private_keys > debug: /File[/var/lib/puppet/ssl/private_keys]/seltype: Found seltype > default ''var_lib_t'' for /var/lib/puppet/ssl/private_keys > debug: /File[/var/lib/puppet/state]/seluser: Found seluser default > ''system_u'' for /var/lib/puppet/state > debug: /File[/var/lib/puppet/state]/selrole: Found selrole default > ''object_r'' for /var/lib/puppet/state > debug: /File[/var/lib/puppet/state]/seltype: Found seltype default > ''var_lib_t'' for /var/lib/puppet/state > debug: /File[/var/run/puppet]/seluser: Found seluser default > ''system_u'' for /var/run/puppet > debug: /File[/var/run/puppet]/selrole: Found selrole default > ''object_r'' for /var/run/puppet > debug: /File[/var/run/puppet]/seltype: Found seltype default > ''var_run_t'' for /var/run/puppet > debug: Failed to load library ''ldap'' for feature ''ldap'' > debug: /File[/etc/puppet/puppet.conf]: Autorequiring File[/etc/puppet] > debug: /File[/var/lib/puppet/ssl]: Autorequiring File[/var/lib/puppet] > debug: /File[/var/lib/puppet/client_yaml]: Autorequiring File[/var/lib/ > puppet] > debug: /File[/var/lib/puppet/ssl/public_keys/prc-mn- > lnx01.pinerivercapital.local.pem]: Autorequiring File[/var/lib/puppet/ > ssl/public_keys] > debug: /File[/var/lib/puppet/facts]: Autorequiring File[/var/lib/ > puppet] > debug: /File[/var/lib/puppet/clientbucket]: Autorequiring File[/var/ > lib/puppet] > debug: /File[/var/lib/puppet/state/graphs]: Autorequiring File[/var/ > lib/puppet/state] > debug: /File[/var/lib/puppet/ssl/certificate_requests]: Autorequiring > File[/var/lib/puppet/ssl] > debug: /File[/var/lib/puppet/ssl/public_keys]: Autorequiring File[/var/ > lib/puppet/ssl] > debug: /File[/var/lib/puppet/state]: Autorequiring File[/var/lib/ > puppet] > debug: /File[/var/lib/puppet/ssl/certs/prc-mn- > lnx01.pinerivercapital.local.pem]: Autorequiring File[/var/lib/puppet/ > ssl/certs] > debug: /File[/var/lib/puppet/ssl/private]: Autorequiring File[/var/lib/ > puppet/ssl] > debug: /File[/var/log/puppet/http.log]: Autorequiring File[/var/log/ > puppet] > debug: /File[/var/lib/puppet/lib]: Autorequiring File[/var/lib/puppet] > debug: /File[/var/lib/puppet/ssl/certs]: Autorequiring File[/var/lib/ > puppet/ssl] > debug: /File[/var/lib/puppet/ssl/certs/ca.pem]: Autorequiring File[/ > var/lib/puppet/ssl/certs] > debug: /File[/var/lib/puppet/ssl/private_keys/prc-mn- > lnx01.pinerivercapital.local.pem]: Autorequiring File[/var/lib/puppet/ > ssl/private_keys] > debug: /File[/var/lib/puppet/ssl/private_keys]: Autorequiring File[/ > var/lib/puppet/ssl] > debug: Finishing transaction 23670146489180 with 0 changes > debug: /File[/var/lib/puppet/ssl]/seluser: Found seluser default > ''system_u'' for /var/lib/puppet/ssl > debug: /File[/var/lib/puppet/ssl]/selrole: Found selrole default > ''object_r'' for /var/lib/puppet/ssl > debug: /File[/var/lib/puppet/ssl]/seltype: Found seltype default > ''var_lib_t'' for /var/lib/puppet/ssl > debug: /File[/var/log/puppet/http.log]/seluser: Found seluser default > ''system_u'' for /var/log/puppet/http.log > debug: /File[/var/log/puppet/http.log]/selrole: Found selrole default > ''object_r'' for /var/log/puppet/http.log > debug: /File[/var/log/puppet/http.log]/seltype: Found seltype default > ''var_log_t'' for /var/log/puppet/http.log > debug: /File[/var/lib/puppet/ssl/private_keys]/seluser: Found seluser > default ''system_u'' for /var/lib/puppet/ssl/private_keys > debug: /File[/var/lib/puppet/ssl/private_keys]/selrole: Found selrole > default ''object_r'' for /var/lib/puppet/ssl/private_keys > debug: /File[/var/lib/puppet/ssl/private_keys]/seltype: Found seltype > default ''var_lib_t'' for /var/lib/puppet/ssl/private_keys > debug: /File[/var/lib/puppet/state]/seluser: Found seluser default > ''system_u'' for /var/lib/puppet/state > debug: /File[/var/lib/puppet/state]/selrole: Found selrole default > ''object_r'' for /var/lib/puppet/state > debug: /File[/var/lib/puppet/state]/seltype: Found seltype default > ''var_lib_t'' for /var/lib/puppet/state > debug: /File[/var/lib/puppet/ssl/certificate_requests]/seluser: Found > seluser default ''system_u'' for /var/lib/puppet/ssl/ > certificate_requests > debug: /File[/var/lib/puppet/ssl/certificate_requests]/selrole: Found > selrole default ''object_r'' for /var/lib/puppet/ssl/ > certificate_requests > debug: /File[/var/lib/puppet/ssl/certificate_requests]/seltype: Found > seltype default ''var_lib_t'' for /var/lib/puppet/ssl/ > certificate_requests > debug: /File[/var/lib/puppet/lib]/seluser: Found seluser default > ''system_u'' for /var/lib/puppet/lib > debug: /File[/var/lib/puppet/lib]/selrole: Found selrole default > ''object_r'' for /var/lib/puppet/lib > debug: /File[/var/lib/puppet/lib]/seltype: Found seltype default > ''var_lib_t'' for /var/lib/puppet/lib > debug: /File[/var/lib/puppet/ssl/certs/prc-mn- > lnx01.pinerivercapital.local.pem]/seluser: Found seluser default > ''system_u'' for /var/lib/puppet/ssl/certs/prc-\ > mn-lnx01.pinerivercapital.local.pem > debug: /File[/var/lib/puppet/ssl/certs/prc-mn- > lnx01.pinerivercapital.local.pem]/selrole: Found selrole default > ''object_r'' for /var/lib/puppet/ssl/certs/prc-\ > mn-lnx01.pinerivercapital.local.pem > debug: /File[/var/lib/puppet/ssl/certs/prc-mn- > lnx01.pinerivercapital.local.pem]/seltype: Found seltype default > ''var_lib_t'' for /var/lib/puppet/ssl/certs/prc\ > -mn-lnx01.pinerivercapital.local.pem > debug: /File[/var/lib/puppet/ssl/private]/seluser: Found seluser > default ''system_u'' for /var/lib/puppet/ssl/private > debug: /File[/var/lib/puppet/ssl/private]/selrole: Found selrole > default ''object_r'' for /var/lib/puppet/ssl/private > debug: /File[/var/lib/puppet/ssl/private]/seltype: Found seltype > default ''var_lib_t'' for /var/lib/puppet/ssl/private > debug: /File[/var/lib/puppet/ssl/private_keys/prc-mn- > lnx01.pinerivercapital.local.pem]/seluser: Found seluser default > ''system_u'' for /var/lib/puppet/ssl/pri\ > vate_keys/prc-mn-lnx01.pinerivercapital.local.pem > debug: /File[/var/lib/puppet/ssl/private_keys/prc-mn- > lnx01.pinerivercapital.local.pem]/selrole: Found selrole default > ''object_r'' for /var/lib/puppet/ssl/pri\ > vate_keys/prc-mn-lnx01.pinerivercapital.local.pem > debug: /File[/var/lib/puppet/ssl/private_keys/prc-mn- > lnx01.pinerivercapital.local.pem]/seltype: Found seltype default > ''var_lib_t'' for /var/lib/puppet/ssl/pr\ > ivate_keys/prc-mn-lnx01.pinerivercapital.local.pem > debug: /File[/var/run/puppet]/seluser: Found seluser default > ''system_u'' for /var/run/puppet > debug: /File[/var/run/puppet]/selrole: Found selrole default > ''object_r'' for /var/run/puppet > debug: /File[/var/run/puppet]/seltype: Found seltype default > ''var_run_t'' for /var/run/puppet > debug: /File[/var/lib/puppet]/seluser: Found seluser default > ''system_u'' for /var/lib/puppet > debug: /File[/var/lib/puppet]/selrole: Found selrole default > ''object_r'' for /var/lib/puppet > debug: /File[/var/lib/puppet]/seltype: Found seltype default > ''var_lib_t'' for /var/lib/puppet > debug: /File[/var/lib/puppet/ssl/certs/ca.pem]/seluser: Found seluser > default ''system_u'' for /var/lib/puppet/ssl/certs/ca.pem > debug: /File[/var/lib/puppet/ssl/certs/ca.pem]/selrole: Found selrole > default ''object_r'' for /var/lib/puppet/ssl/certs/ca.pem > debug: /File[/var/lib/puppet/ssl/certs/ca.pem]/seltype: Found seltype > default ''var_lib_t'' for /var/lib/puppet/ssl/certs/ca.pem > debug: /File[/var/log/puppet]/seluser: Found seluser default > ''system_u'' for /var/log/puppet > debug: /File[/var/log/puppet]/selrole: Found selrole default > ''object_r'' for /var/log/puppet > debug: /File[/var/log/puppet]/seltype: Found seltype default > ''var_log_t'' for /var/log/puppet > debug: /File[/var/lib/puppet/ssl/certs]/seluser: Found seluser default > ''system_u'' for /var/lib/puppet/ssl/certs > debug: /File[/var/lib/puppet/ssl/certs]/selrole: Found selrole default > ''object_r'' for /var/lib/puppet/ssl/certs > debug: /File[/var/lib/puppet/ssl/certs]/seltype: Found seltype default > ''var_lib_t'' for /var/lib/puppet/ssl/certs > debug: /File[/var/lib/puppet/facts]/seluser: Found seluser default > ''system_u'' for /var/lib/puppet/facts > debug: /File[/var/lib/puppet/facts]/selrole: Found selrole default > ''object_r'' for /var/lib/puppet/facts > debug: /File[/var/lib/puppet/facts]/seltype: Found seltype default > ''var_lib_t'' for /var/lib/puppet/facts > debug: /File[/var/lib/puppet/ssl/public_keys]/seluser: Found seluser > default ''system_u'' for /var/lib/puppet/ssl/public_keys > debug: /File[/var/lib/puppet/ssl/public_keys]/selrole: Found selrole > default ''object_r'' for /var/lib/puppet/ssl/public_keys > debug: /File[/var/lib/puppet/ssl/public_keys]/seltype: Found seltype > default ''var_lib_t'' for /var/lib/puppet/ssl/public_keys > debug: /File[/etc/puppet]/seluser: Found seluser default ''system_u'' > for /etc/puppet > debug: /File[/etc/puppet]/selrole: Found selrole default ''object_r'' > for /etc/puppet > debug: /File[/etc/puppet]/seltype: Found seltype default ''etc_t'' for / > etc/puppet > debug: /File[/var/lib/puppet/ssl/public_keys/prc-mn- > lnx01.pinerivercapital.local.pem]/seluser: Found seluser default > ''system_u'' for /var/lib/puppet/ssl/publ\ > ic_keys/prc-mn-lnx01.pinerivercapital.local.pem > debug: /File[/var/lib/puppet/ssl/public_keys/prc-mn- > lnx01.pinerivercapital.local.pem]/selrole: Found selrole default > ''object_r'' for /var/lib/puppet/ssl/publ\ > ic_keys/prc-mn-lnx01.pinerivercapital.local.pem > debug: /File[/var/lib/puppet/ssl/public_keys/prc-mn- > lnx01.pinerivercapital.local.pem]/seltype: Found seltype default > ''var_lib_t'' for /var/lib/puppet/ssl/pub\ > lic_keys/prc-mn-lnx01.pinerivercapital.local.pem > debug: /File[/var/lib/puppet/state]: Autorequiring File[/var/lib/ > puppet] > debug: /File[/var/lib/puppet/lib]: Autorequiring File[/var/lib/puppet] > debug: /File[/var/lib/puppet/ssl/certs/prc-mn- > lnx01.pinerivercapital.local.pem]: Autorequiring File[/var/lib/puppet/ > ssl/certs] > debug: /File[/var/lib/puppet/ssl/private_keys/prc-mn- > lnx01.pinerivercapital.local.pem]: Autorequiring File[/var/lib/puppet/ > ssl/private_keys] > debug: /File[/var/lib/puppet/ssl/certs]: Autorequiring File[/var/lib/ > puppet/ssl] > debug: /File[/var/lib/puppet/facts]: Autorequiring File[/var/lib/ > puppet] > debug: /File[/var/lib/puppet/ssl/certificate_requests]: Autorequiring > File[/var/lib/puppet/ssl] > debug: /File[/var/lib/puppet/ssl/certs/ca.pem]: Autorequiring File[/ > var/lib/puppet/ssl/certs] > debug: /File[/var/lib/puppet/ssl/public_keys]: Autorequiring File[/var/ > lib/puppet/ssl] > debug: /File[/var/lib/puppet/ssl/public_keys/prc-mn- > lnx01.pinerivercapital.local.pem]: Autorequiring File[/var/lib/puppet/ > ssl/public_keys] > debug: /File[/var/log/puppet/http.log]: Autorequiring File[/var/log/ > puppet] > debug: /File[/var/lib/puppet/ssl/private_keys]: Autorequiring File[/ > var/lib/puppet/ssl] > debug: /File[/var/lib/puppet/ssl]: Autorequiring File[/var/lib/puppet] > debug: /File[/var/lib/puppet/ssl/private]: Autorequiring File[/var/lib/ > puppet/ssl] > debug: Finishing transaction 23670146763060 with 0 changes > debug: Using cached certificate for ca > debug: Using cached certificate for prc-mn- > lnx01.pinerivercapital.local > debug: /File[/var/lib/puppet/client_yaml]/seluser: Found seluser > default ''system_u'' for /var/lib/puppet/client_yaml > debug: /File[/var/lib/puppet/client_yaml]/selrole: Found selrole > default ''object_r'' for /var/lib/puppet/client_yaml > debug: /File[/var/lib/puppet/client_yaml]/seltype: Found seltype > default ''var_lib_t'' for /var/lib/puppet/client_yaml > debug: /File[/var/lib/puppet/clientbucket]/seluser: Found seluser > default ''system_u'' for /var/lib/puppet/clientbucket > debug: /File[/var/lib/puppet/clientbucket]/selrole: Found selrole > default ''object_r'' for /var/lib/puppet/clientbucket > debug: /File[/var/lib/puppet/clientbucket]/seltype: Found seltype > default ''var_lib_t'' for /var/lib/puppet/clientbucket > debug: /File[/var/lib/puppet/state/graphs]/seluser: Found seluser > default ''system_u'' for /var/lib/puppet/state/graphs > debug: /File[/var/lib/puppet/state/graphs]/selrole: Found selrole > default ''object_r'' for /var/lib/puppet/state/graphs > debug: /File[/var/lib/puppet/state/graphs]/seltype: Found seltype > default ''var_lib_t'' for /var/lib/puppet/state/graphs > debug: /File[/etc/puppet/puppet.conf]/seluser: Found seluser default > ''system_u'' for /etc/puppet/puppet.conf > debug: /File[/etc/puppet/puppet.conf]/selrole: Found selrole default > ''object_r'' for /etc/puppet/puppet.conf > debug: /File[/etc/puppet/puppet.conf]/seltype: Found seltype default > ''etc_t'' for /etc/puppet/puppet.conf > debug: Finishing transaction 23670146198020 with 0 changes > debug: Using cached certificate for ca > debug: Using cached certificate for prc-mn- > lnx01.pinerivercapital.local > err: Could not retrieve catalog from remote server: hostname not match > with the server certificate > warning: Not using cache on failed catalog > err: Could not retrieve catalog; skipping run > [root@prc-mn-lnx01 ~]#-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Jeff McCune
2010-Jul-27 01:03 UTC
Re: [Puppet Users] Can''t get simplest client / server connection to work still
On Mon, Jul 26, 2010 at 12:29 PM, WEB PAGE: http://www.dyarstraights.com (08/14/04) WEB PAGE: http://www.livejournal.com/users/allyson13/ (08/14/04) David Dyer-Bennet 11/30/04 Minneapolis, Minnesota Address(es): <dd-b@dd-b.net> wrote:> I''ve triple-checked that I''m restarting the server after changing the > config. I''m sure I have been all along; in any case the latest test > fails just like the others, with > > err: Could not retrieve catalog from remote server: hostname not match > with the server certificate > > Just out of curiosity, which hostname (client or server), what is its > current value (is this in the debug output somewhere?), and what is > the name on the server certificate? (The debug output shows > references to prc-mn-lnx01.pinerivercapital.local certificates; but I > can''t tell if the copy they are referring to is on the client or on > the server; the directory structures are the same on both.)If you look at the SSL certificate on the puppet master using the output of openssl x509 -text -noout -in /path/to/cert.pem , does it contain the name you''re using to connect from the client? These names much mast for SSL verification to work. -- Jeff McCune http://www.puppetlabs.com/ -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
David Dyer-Bennet
2010-Jul-27 14:40 UTC
Re: [Puppet Users] Re: Can''t get simplest client / server connection to work still
On Mon, July 26, 2010 18:27, DaveQB wrote:> Try messing with the: > certname> > value in the > > [puppetd] > > Stanza. > > Other than that, there is a way to see what the name on the cert is. I > have used that but can''t recall the openssl command for that. Search > for it.Ah, that''s useful, thanks. A pointer to something that should eventually get me more information! This is the first thing I''ve really done with certificates, so I don''t know the tools there very well. -- David Dyer-Bennet, dd-b@dd-b.net; http://dd-b.net/ Snapshots: http://dd-b.net/dd-b/SnapshotAlbum/data/ Photos: http://dd-b.net/photography/gallery/ Dragaera: http://dragaera.info -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.