Hello, I''m running 0.25.4 on Ubuntu 10.04 LTS. Recently when I start puppetmaster the 8140 port opens but if any client machine connects to it (ie telnet localhost 8140), the connection immediately dies. Network wise I see a syn, syn-ack, ack then a fin-ack in both directions and then a final ack. It sounds like something accepts the connection and immediately disconnects. There''s no time to present a cert or anything. I cannot find any system level problems so I''m wondering if it''s a known problem or a configuration problem of mine? Machines eventually can connect in, but I don''t understand how. Thanks, Jason -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Thomas Bellman
2011-Jan-15 12:20 UTC
Re: [Puppet Users] puppetmaster immediately disconnects
Jason Carr wrote:> I''m running 0.25.4 on Ubuntu 10.04 LTS. Recently when I start > puppetmaster the 8140 port opens but if any client machine connects to > it (ie telnet localhost 8140), the connection immediately dies. > Network wise I see a syn, syn-ack, ack then a fin-ack in both > directions and then a final ack. It sounds like something accepts the > connection and immediately disconnects. There''s no time to present a > cert or anything.At least the built-in webserver in puppetmasterd (Webrick) is set up to have *very* short timeout for clients to actually start talking to it. I don''t know the exact timeout, but it is on the order of 0.1 seconds. (I don''t know how Mongrel or Passenger behaves in that respect.) Try using ''openssl s_client -connect localhost:8140'' instead of using telnet, and you won''t be immediately disconnected.> I cannot find any system level problems so I''m wondering if it''s a > known problem or a configuration problem of mine? Machines eventually > can connect in, but I don''t understand how.You say the clients can *eventually* connect. Do you by that mean that it may take several tries for them before they are able to connect and get their plugins, catalog and files? If so, you have a problem. But if it is just your telnet attempts that you believe fail, and the puppetd clients themselves work find, then things are just working as designed. /Bellman -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Mohamed Lrhazi
2011-Jan-15 17:52 UTC
Re: [Puppet Users] puppetmaster immediately disconnects
stop the master, then run it in debug mode and then telnet in: puppet master --no-daemonize --debug --verbose --trace On Wed, Jan 12, 2011 at 6:19 PM, Jason Carr <jason.carr@gmail.com> wrote:> Hello, > > I''m running 0.25.4 on Ubuntu 10.04 LTS. Recently when I start > puppetmaster the 8140 port opens but if any client machine connects to > it (ie telnet localhost 8140), the connection immediately dies. > Network wise I see a syn, syn-ack, ack then a fin-ack in both > directions and then a final ack. It sounds like something accepts the > connection and immediately disconnects. There''s no time to present a > cert or anything. > > I cannot find any system level problems so I''m wondering if it''s a > known problem or a configuration problem of mine? Machines eventually > can connect in, but I don''t understand how. > > Thanks, > > Jason > > -- > You received this message because you are subscribed to the Google Groups "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. > For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. > >-- يوم نلقاك يوم فرحي و هنايا -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
On Sat, Jan 15, 2011 at 7:52 PM, Mohamed Lrhazi <lrhazi@gmail.com> wrote:> stop the master, then run it in debug mode and then telnet in: > > You didn''t really say telnet did you ;-)> puppet master --no-daemonize --debug --verbose --trace > > On Wed, Jan 12, 2011 at 6:19 PM, Jason Carr <jason.carr@gmail.com> wrote: > > Hello, > > > > I''m running 0.25.4 on Ubuntu 10.04 LTS. Recently when I start > > puppetmaster the 8140 port opens but if any client machine connects to > > it (ie telnet localhost 8140), the connection immediately dies. > > Network wise I see a syn, syn-ack, ack then a fin-ack in both > > directions and then a final ack. It sounds like something accepts the > > connection and immediately disconnects. There''s no time to present a > > cert or anything. > > > > I cannot find any system level problems so I''m wondering if it''s a > > known problem or a configuration problem of mine? Machines eventually > > can connect in, but I don''t understand how. > > > > Thanks, > > > > Jason > > > > -- > > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > > To post to this group, send email to puppet-users@googlegroups.com. > > To unsubscribe from this group, send email to > puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com> > . > > For more options, visit this group at > http://groups.google.com/group/puppet-users?hl=en. > > > > > > > > -- > يوم نلقاك يوم فرحي و هنايا > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to > puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com> > . > For more options, visit this group at > http://groups.google.com/group/puppet-users?hl=en. > >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Mohamed Lrhazi
2011-Jan-15 18:44 UTC
Re: [Puppet Users] puppetmaster immediately disconnects
The right thing would be "run puppetd".. but he is testing with telnet,... I guess he would not see anything, as he'' d need to complete ssl, by hand from telnet prompt :) On Sat, Jan 15, 2011 at 1:13 PM, Ohad Levy <ohadlevy@gmail.com> wrote:> > > On Sat, Jan 15, 2011 at 7:52 PM, Mohamed Lrhazi <lrhazi@gmail.com> wrote: >> >> stop the master, then run it in debug mode and then telnet in: >> > You didn''t really say telnet did you ;-) > >> >> puppet master --no-daemonize --debug --verbose --trace >> >> On Wed, Jan 12, 2011 at 6:19 PM, Jason Carr <jason.carr@gmail.com> wrote: >> > Hello, >> > >> > I''m running 0.25.4 on Ubuntu 10.04 LTS. Recently when I start >> > puppetmaster the 8140 port opens but if any client machine connects to >> > it (ie telnet localhost 8140), the connection immediately dies. >> > Network wise I see a syn, syn-ack, ack then a fin-ack in both >> > directions and then a final ack. It sounds like something accepts the >> > connection and immediately disconnects. There''s no time to present a >> > cert or anything. >> > >> > I cannot find any system level problems so I''m wondering if it''s a >> > known problem or a configuration problem of mine? Machines eventually >> > can connect in, but I don''t understand how. >> > >> > Thanks, >> > >> > Jason >> > >> > -- >> > You received this message because you are subscribed to the Google >> > Groups "Puppet Users" group. >> > To post to this group, send email to puppet-users@googlegroups.com. >> > To unsubscribe from this group, send email to >> > puppet-users+unsubscribe@googlegroups.com. >> > For more options, visit this group at >> > http://groups.google.com/group/puppet-users?hl=en. >> > >> > >> >> >> >> -- >> يوم نلقاك يوم فرحي و هنايا >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Puppet Users" group. >> To post to this group, send email to puppet-users@googlegroups.com. >> To unsubscribe from this group, send email to >> puppet-users+unsubscribe@googlegroups.com. >> For more options, visit this group at >> http://groups.google.com/group/puppet-users?hl=en. >> > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to > puppet-users+unsubscribe@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/puppet-users?hl=en. >-- يوم نلقاك يوم فرحي و هنايا -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Mohamed Lrhazi
2011-Jan-15 18:53 UTC
Re: [Puppet Users] puppetmaster immediately disconnects
actually, using apache/passenger, that is using apache/ssl, telnet connect and stays connected, not close immidiately: telnet localhost 8140 Trying 127.0.0.1... Connected to localhost (127.0.0.1). Escape character is ''^]''. <Ctrl-C> Connection closed by foreign host. so something is wrong ... Mohamed. 2011/1/15 Mohamed Lrhazi <lrhazi@gmail.com>:> The right thing would be "run puppetd".. but he is testing with > telnet,... I guess he would not see anything, as he'' d need to > complete ssl, by hand from telnet prompt :) > > > > On Sat, Jan 15, 2011 at 1:13 PM, Ohad Levy <ohadlevy@gmail.com> wrote: >> >> >> On Sat, Jan 15, 2011 at 7:52 PM, Mohamed Lrhazi <lrhazi@gmail.com> wrote: >>> >>> stop the master, then run it in debug mode and then telnet in: >>> >> You didn''t really say telnet did you ;-) >> >>> >>> puppet master --no-daemonize --debug --verbose --trace >>> >>> On Wed, Jan 12, 2011 at 6:19 PM, Jason Carr <jason.carr@gmail.com> wrote: >>> > Hello, >>> > >>> > I''m running 0.25.4 on Ubuntu 10.04 LTS. Recently when I start >>> > puppetmaster the 8140 port opens but if any client machine connects to >>> > it (ie telnet localhost 8140), the connection immediately dies. >>> > Network wise I see a syn, syn-ack, ack then a fin-ack in both >>> > directions and then a final ack. It sounds like something accepts the >>> > connection and immediately disconnects. There''s no time to present a >>> > cert or anything. >>> > >>> > I cannot find any system level problems so I''m wondering if it''s a >>> > known problem or a configuration problem of mine? Machines eventually >>> > can connect in, but I don''t understand how. >>> > >>> > Thanks, >>> > >>> > Jason >>> > >>> > -- >>> > You received this message because you are subscribed to the Google >>> > Groups "Puppet Users" group. >>> > To post to this group, send email to puppet-users@googlegroups.com. >>> > To unsubscribe from this group, send email to >>> > puppet-users+unsubscribe@googlegroups.com. >>> > For more options, visit this group at >>> > http://groups.google.com/group/puppet-users?hl=en. >>> > >>> > >>> >>> >>> >>> -- >>> يوم نلقاك يوم فرحي و هنايا >>> >>> -- >>> You received this message because you are subscribed to the Google Groups >>> "Puppet Users" group. >>> To post to this group, send email to puppet-users@googlegroups.com. >>> To unsubscribe from this group, send email to >>> puppet-users+unsubscribe@googlegroups.com. >>> For more options, visit this group at >>> http://groups.google.com/group/puppet-users?hl=en. >>> >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Puppet Users" group. >> To post to this group, send email to puppet-users@googlegroups.com. >> To unsubscribe from this group, send email to >> puppet-users+unsubscribe@googlegroups.com. >> For more options, visit this group at >> http://groups.google.com/group/puppet-users?hl=en. >> > > > > -- > يوم نلقاك يوم فرحي و هنايا >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
it doesn''t get closed as telnet doesn''t send anything.. ssl needs a few chars to find out if its valid or not.. usually there should be some sort of a timeout until the connection would be dropped. p.s. I was only joking about using telnet, i actually do use telnet for this specific usage case often. Ohad 2011/1/15 Mohamed Lrhazi <lrhazi@gmail.com>> actually, using apache/passenger, that is using apache/ssl, telnet > connect and stays connected, not close immidiately: > > telnet localhost 8140 > > Trying 127.0.0.1... > Connected to localhost (127.0.0.1). > Escape character is ''^]''. > > > > > <Ctrl-C> > Connection closed by foreign host. > > so something is wrong ... > > Mohamed. > > 2011/1/15 Mohamed Lrhazi <lrhazi@gmail.com>: > > The right thing would be "run puppetd".. but he is testing with > > telnet,... I guess he would not see anything, as he'' d need to > > complete ssl, by hand from telnet prompt :) > > > > > > > > On Sat, Jan 15, 2011 at 1:13 PM, Ohad Levy <ohadlevy@gmail.com> wrote: > >> > >> > >> On Sat, Jan 15, 2011 at 7:52 PM, Mohamed Lrhazi <lrhazi@gmail.com> > wrote: > >>> > >>> stop the master, then run it in debug mode and then telnet in: > >>> > >> You didn''t really say telnet did you ;-) > >> > >>> > >>> puppet master --no-daemonize --debug --verbose --trace > >>> > >>> On Wed, Jan 12, 2011 at 6:19 PM, Jason Carr <jason.carr@gmail.com> > wrote: > >>> > Hello, > >>> > > >>> > I''m running 0.25.4 on Ubuntu 10.04 LTS. Recently when I start > >>> > puppetmaster the 8140 port opens but if any client machine connects > to > >>> > it (ie telnet localhost 8140), the connection immediately dies. > >>> > Network wise I see a syn, syn-ack, ack then a fin-ack in both > >>> > directions and then a final ack. It sounds like something accepts > the > >>> > connection and immediately disconnects. There''s no time to present a > >>> > cert or anything. > >>> > > >>> > I cannot find any system level problems so I''m wondering if it''s a > >>> > known problem or a configuration problem of mine? Machines > eventually > >>> > can connect in, but I don''t understand how. > >>> > > >>> > Thanks, > >>> > > >>> > Jason > >>> > > >>> > -- > >>> > You received this message because you are subscribed to the Google > >>> > Groups "Puppet Users" group. > >>> > To post to this group, send email to puppet-users@googlegroups.com. > >>> > To unsubscribe from this group, send email to > >>> > puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com> > . > >>> > For more options, visit this group at > >>> > http://groups.google.com/group/puppet-users?hl=en. > >>> > > >>> > > >>> > >>> > >>> > >>> -- > >>> يوم نلقاك يوم فرحي و هنايا > >>> > >>> -- > >>> You received this message because you are subscribed to the Google > Groups > >>> "Puppet Users" group. > >>> To post to this group, send email to puppet-users@googlegroups.com. > >>> To unsubscribe from this group, send email to > >>> puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com> > . > >>> For more options, visit this group at > >>> http://groups.google.com/group/puppet-users?hl=en. > >>> > >> > >> -- > >> You received this message because you are subscribed to the Google > Groups > >> "Puppet Users" group. > >> To post to this group, send email to puppet-users@googlegroups.com. > >> To unsubscribe from this group, send email to > >> puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com> > . > >> For more options, visit this group at > >> http://groups.google.com/group/puppet-users?hl=en. > >> > > > > > > > > -- > > يوم نلقاك يوم فرحي و هنايا > > > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to > puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com> > . > For more options, visit this group at > http://groups.google.com/group/puppet-users?hl=en. > >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Mark Stanislav
2011-Jan-15 19:13 UTC
Re: [Puppet Users] puppetmaster immediately disconnects
Perhaps using openssl s_client -connect localhost:8140 may be a viable ''quick'' test? -Mark On Jan 15, 2011, at 2:04 PM, Ohad Levy wrote:> it doesn''t get closed as telnet doesn''t send anything.. ssl needs a few chars to find out if its valid or not.. usually there should be some sort of a timeout until the connection would be dropped. > > p.s. I was only joking about using telnet, i actually do use telnet for this specific usage case often. > Ohad > > 2011/1/15 Mohamed Lrhazi <lrhazi@gmail.com> > actually, using apache/passenger, that is using apache/ssl, telnet > connect and stays connected, not close immidiately: > > telnet localhost 8140 > > Trying 127.0.0.1... > Connected to localhost (127.0.0.1). > Escape character is ''^]''. > > > > > <Ctrl-C> > Connection closed by foreign host. > > so something is wrong ... > > Mohamed. > > 2011/1/15 Mohamed Lrhazi <lrhazi@gmail.com>: > > The right thing would be "run puppetd".. but he is testing with > > telnet,... I guess he would not see anything, as he'' d need to > > complete ssl, by hand from telnet prompt :) > > > > > > > > On Sat, Jan 15, 2011 at 1:13 PM, Ohad Levy <ohadlevy@gmail.com> wrote: > >> > >> > >> On Sat, Jan 15, 2011 at 7:52 PM, Mohamed Lrhazi <lrhazi@gmail.com> wrote: > >>> > >>> stop the master, then run it in debug mode and then telnet in: > >>> > >> You didn''t really say telnet did you ;-) > >> > >>> > >>> puppet master --no-daemonize --debug --verbose --trace > >>> > >>> On Wed, Jan 12, 2011 at 6:19 PM, Jason Carr <jason.carr@gmail.com> wrote: > >>> > Hello, > >>> > > >>> > I''m running 0.25.4 on Ubuntu 10.04 LTS. Recently when I start > >>> > puppetmaster the 8140 port opens but if any client machine connects to > >>> > it (ie telnet localhost 8140), the connection immediately dies. > >>> > Network wise I see a syn, syn-ack, ack then a fin-ack in both > >>> > directions and then a final ack. It sounds like something accepts the > >>> > connection and immediately disconnects. There''s no time to present a > >>> > cert or anything. > >>> > > >>> > I cannot find any system level problems so I''m wondering if it''s a > >>> > known problem or a configuration problem of mine? Machines eventually > >>> > can connect in, but I don''t understand how. > >>> > > >>> > Thanks, > >>> > > >>> > Jason > >>> > > >>> > -- > >>> > You received this message because you are subscribed to the Google > >>> > Groups "Puppet Users" group. > >>> > To post to this group, send email to puppet-users@googlegroups.com. > >>> > To unsubscribe from this group, send email to > >>> > puppet-users+unsubscribe@googlegroups.com. > >>> > For more options, visit this group at > >>> > http://groups.google.com/group/puppet-users?hl=en. > >>> > > >>> > > >>> > >>> > >>> > >>> -- > >>> يوم نلقاك يوم فرحي و هنايا > >>> > >>> -- > >>> You received this message because you are subscribed to the Google Groups > >>> "Puppet Users" group. > >>> To post to this group, send email to puppet-users@googlegroups.com. > >>> To unsubscribe from this group, send email to > >>> puppet-users+unsubscribe@googlegroups.com. > >>> For more options, visit this group at > >>> http://groups.google.com/group/puppet-users?hl=en. > >>> > >> > >> -- > >> You received this message because you are subscribed to the Google Groups > >> "Puppet Users" group. > >> To post to this group, send email to puppet-users@googlegroups.com. > >> To unsubscribe from this group, send email to > >> puppet-users+unsubscribe@googlegroups.com. > >> For more options, visit this group at > >> http://groups.google.com/group/puppet-users?hl=en. > >> > > > > > > > > -- > > يوم نلقاك يوم فرحي و هنايا > > > > -- > You received this message because you are subscribed to the Google Groups "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. > For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. > > > > -- > You received this message because you are subscribed to the Google Groups "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. > For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.