Puppet users - May 2008 - Puppetting the puppetmaster problems

Hi,
installing puppet at my first site was quite easy (not w/o problems,
but still). At the second site, I''ve run into something more serious.

First things first - I install puppetmaster on existing server, used
to keep LDAP db (my puppetmaster DOES NOT use LDAP, it just tries to
coexist on the same machine). The thing is, I need to puppet this
baby, so I''m running into a situation where puppetmaster is
maintaining itself via puppetd.

Long story short, this is what happens:

May 27 15:43:09 ldap_db puppetmasterd[26986]: Starting Puppet server
version 0.24.4
May 27 15:43:20 ldap_db puppetd[27001]: Creating a new certificate
request for ldap_db.foo.bar
May 27 15:43:20 ldap_db puppetd[27001]: Creating a new SSL key at /etc/
puppet/ssl/private_keys/ldap_db.foo.bar.pem
May 27 15:43:20 ldap_db puppetmasterd[26986]: Allowing unauthenticated
client ldap_db.foo.bar(10.10.10.1) access to puppetca.getcert
May 27 15:43:20 ldap_db puppetmasterd[26986]: Certificate request does
not match existing certificate; run ''puppetca --clean
ldap_db.foo.bar''.

OK, # puppetca --clean ldap_db.foo.bar and restarting puppetd

May 27 15:43:56 ldap_db puppetmasterd[26986]: Allowing unauthenticated
client ldap_db.foo.bar(10.10.10.1) access to puppetca.getcert
May 27 15:43:56 ldap_db puppetmasterd[26986]: Host ldap_db.foo.bar has
a waiting certificate request
May 27 15:43:56 ldap_db puppetd[27067]: No certificates; exiting
May 27 15:44:20 ldap_db puppetd[26878]: Restarting with ''/usr/bin/
puppetd --listen''
May 27 15:44:20 ldap_db puppetd[26878]: Shutting down
May 27 15:44:22 ldap_db puppetd[27199]: Reopening log files
May 27 15:44:22 ldap_db puppetd[27203]: Could not create PID file: /
var/run/puppetd.pid
May 27 15:44:22 ldap_db puppetmasterd[26986]: Allowing unauthenticated
client ldap_db.foo.bar(10.10.10.1) access to puppetca.getcert
May 27 15:44:22 ldap_db puppetd[27199]: Got signed certificate

As you can see, I signed new certificate

May 27 15:44:22 ldap_db puppetd[27199]: Starting Puppet client version
0.24.4
May 27 15:44:23 ldap_db puppetmasterd[26986]: Denying authenticated
client ldap_db.foo.bar(10.10.10.1) access to puppetmaster.getconfig
May 27 15:44:23 ldap_db puppetd[27199]: Could not call
puppetmaster.getconfig: #<NoMethodError: private method `split''
called
for nil:NilClass>
May 27 15:44:23 ldap_db puppetd[27199]: Could not retrieve catalog:
private method `split'' called for nil:NilClass

I''m guessing that problem appears because of mixing between client and
server certificates, but I don''t know how to mitigate this problem.

Any help would be appreciated

Stanislaw
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

I''m just posting this because usually the response on this list is
very fast, and now I feel a bit alone :-):

If what I''m asking is something obvious, just tell. If anyone has a
recipe for "how to run puppetmasterd and puppetd on the same machine",
just send a link. Please. Thank you.

Stanislaw.

On May 27, 4:14 pm, Stasheck <stanislaw.kamin...@gmail.com>
wrote:
> Hi,
> installing puppet at my first site was quite easy (not w/o problems,
> but still). At the second site, I''ve run into something more
serious.
>
> First things first - I install puppetmaster on existing server, used
> to keep LDAP db (my puppetmaster DOES NOT use LDAP, it just tries to
> coexist on the same machine). The thing is, I need to puppet this
> baby, so I''m running into a situation where puppetmaster is
> maintaining itself via puppetd.
>
> Long story short, this is what happens:
>
> May 27 15:43:09 ldap_db puppetmasterd[26986]: Starting Puppet server
> version 0.24.4
> May 27 15:43:20 ldap_db puppetd[27001]: Creating a new certificate
> request for ldap_db.foo.bar
> May 27 15:43:20 ldap_db puppetd[27001]: Creating a new SSL key at /etc/
> puppet/ssl/private_keys/ldap_db.foo.bar.pem
> May 27 15:43:20 ldap_db puppetmasterd[26986]: Allowing unauthenticated
> client ldap_db.foo.bar(10.10.10.1) access to puppetca.getcert
> May 27 15:43:20 ldap_db puppetmasterd[26986]: Certificate request does
> not match existing certificate; run ''puppetca --clean
> ldap_db.foo.bar''.
>
> OK, # puppetca --clean ldap_db.foo.bar and restarting puppetd
>
> May 27 15:43:56 ldap_db puppetmasterd[26986]: Allowing unauthenticated
> client ldap_db.foo.bar(10.10.10.1) access to puppetca.getcert
> May 27 15:43:56 ldap_db puppetmasterd[26986]: Host ldap_db.foo.bar has
> a waiting certificate request
> May 27 15:43:56 ldap_db puppetd[27067]: No certificates; exiting
> May 27 15:44:20 ldap_db puppetd[26878]: Restarting with ''/usr/bin/
> puppetd --listen''
> May 27 15:44:20 ldap_db puppetd[26878]: Shutting down
> May 27 15:44:22 ldap_db puppetd[27199]: Reopening log files
> May 27 15:44:22 ldap_db puppetd[27203]: Could not create PID file: /
> var/run/puppetd.pid
> May 27 15:44:22 ldap_db puppetmasterd[26986]: Allowing unauthenticated
> client ldap_db.foo.bar(10.10.10.1) access to puppetca.getcert
> May 27 15:44:22 ldap_db puppetd[27199]: Got signed certificate
>
> As you can see, I signed new certificate
>
> May 27 15:44:22 ldap_db puppetd[27199]: Starting Puppet client version
> 0.24.4
> May 27 15:44:23 ldap_db puppetmasterd[26986]: Denying authenticated
> client ldap_db.foo.bar(10.10.10.1) access to puppetmaster.getconfig
> May 27 15:44:23 ldap_db puppetd[27199]: Could not call
> puppetmaster.getconfig: #<NoMethodError: private method `split''
called
> for nil:NilClass>
> May 27 15:44:23 ldap_db puppetd[27199]: Could not retrieve catalog:
> private method `split'' called for nil:NilClass
>
> I''m guessing that problem appears because of mixing between client
and
> server certificates, but I don''t know how to mitigate this
problem.
>
> Any help would be appreciated
>
> Stanislaw
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear Stasheck!

Please exuse me, your mail must have slipped under my radar.

On Tuesday 27 May 2008, Stasheck wrote:
> Hi,
> installing puppet at my first site was quite easy (not w/o problems,
> but still). At the second site, I''ve run into something more
serious.
>
> First things first - I install puppetmaster on existing server, used
> to keep LDAP db (my puppetmaster DOES NOT use LDAP, it just tries to
> coexist on the same machine). The thing is, I need to puppet this
> baby, so I''m running into a situation where puppetmaster is
> maintaining itself via puppetd.
I''m doing that and I know of a few others who are doing this without
problems.
> Long story short, this is what happens:
>
> May 27 15:43:09 ldap_db puppetmasterd[26986]: Starting Puppet server
> version 0.24.4
> May 27 15:43:20 ldap_db puppetd[27001]: Creating a new certificate
> request for ldap_db.foo.bar
> May 27 15:43:20 ldap_db puppetd[27001]: Creating a new SSL key at /etc/
> puppet/ssl/private_keys/ldap_db.foo.bar.pem
> May 27 15:43:20 ldap_db puppetmasterd[26986]: Allowing unauthenticated
> client ldap_db.foo.bar(10.10.10.1) access to puppetca.getcert
> May 27 15:43:20 ldap_db puppetmasterd[26986]: Certificate request does
> not match existing certificate; run ''puppetca --clean
> ldap_db.foo.bar''.
That already smells. In my recollection the puppetmaster, when starting the 
first time, creates AND signs his own certificate. Are you sure your 
DNS/hosts file match with what puppet thinks the certname should be and 
everything?

If it is at all possible, try to shutdown puppet and puppetmaster on the 
machine, move away $vardir/ssl''s contents and start over by starting
the
pupetmaster. This should create a new Certificate Authority and a new 
certified key for the host.



Regards, DavidS

- -- 
The primary freedom of open source is not the freedom from cost, but the free-
dom to shape software to do what you want. This freedom is /never/ exercised
without cost, but is available /at all/ only by accepting the very different
costs associated with open source, costs not in money, but in time and effort.
- -- http://www.schierer.org/~luke/log/20070710-1129/on-forks-and-forking
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFIPl9G/Pp1N6Uzh0URAnmbAJ4nDDQpbrsNed7YpafwLMHJvAKO+ACfWr4f
n0ykhn1zTEbrRRRxPcrRjBU=JX1w
-----END PGP SIGNATURE-----

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Thank God for your reply - I was starting to feel really, really
stupid :-)

Now to the point: since I didn''t deploy puppet on any other machine on
the site, I erased all ssl dirs in order for puppet to regenerate
them. So, I deleted
/etc/puppet/ssl (that''s for puppetd, right?) and /var/lib/puppet/ssl
(that''s for puppetmasterd, if I''m not mistaken).

# /etc/init.d/puppetmaster start (I''m using Debian Sarge, and init
script is adapted from Ubuntu, only change being puppetd binary
directory)
Log says:
May 29 11:13:09 ldap_db puppetmasterd[23956]: Reopening log files
May 29 11:13:09 ldap_db puppetmasterd[23956]: Starting Puppet server
version 0.24.4

and /var/lib/puppet/ssl directory is created:

/var/lib/puppet/ssl/
-> ca/
--> private/
---> ca.pass
--> requests/
--> signed/
---> ldap_db.foo.bar.pem
--> ca_crl.pem
--> ca_crt.pem
--> ca_key.pem
--> ca_pub.pem
--> inventory.txt
--> serial
-> certs/
--> ca.pem
--> ldap_db.foo.bar.pem
-> private/
-> private_keys/
--> ldap_db.foo.bar.pem
-> public_keys/
--> ldap_db.foo.bar.pem
-> csr_ldap_db.foo.bar.pem

Of course, nothing new shows in /etc/puppet.

Now,
# puppetd -v --server ldap_db.foo.bar --test
info: Creating a new certificate request for ldap_db.foo.bar
info: Creating a new SSL key at /etc/puppet/ssl/private_keys/
ldap_db.foo.bar.pem
warning: peer certificate won''t be verified in this SSL session.
/usr/local/lib/site_ruby/1.8/puppet/network/client/ca.rb:31:in
''request_cert'': Certificate retrieval failed: Certificate
request does
not match existing certificate; run ''puppetca --clean
ldap_db.foo.bar''. (Puppet::Error)
    from /usr/bin/puppetd:356

I guess that shouldn''t go like this, isn''t it? But I
don''t have any
idea what went wrong :/

I think that doing clean and showing more output is unnecessary,
because I shouldn''t have to do cleanup in the first place, correct?

Regards,
Stanislaw

On May 29, 9:46 am, David Schmitt <da...@schmitt.edv-bus.at>
wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Dear Stasheck!
>
> Please exuse me, your mail must have slipped under my radar.
>
> On Tuesday 27 May 2008, Stasheck wrote:
>
> > Hi,
> > installing puppet at my first site was quite easy (not w/o problems,
> > but still). At the second site, I''ve run into something more
serious.
>
> > First things first - I install puppetmaster on existing server, used
> > to keep LDAP db (my puppetmaster DOES NOT use LDAP, it just tries to
> > coexist on the same machine). The thing is, I need to puppet this
> > baby, so I''m running into a situation where puppetmaster is
> > maintaining itself via puppetd.
>
> I''m doing that and I know of a few others who are doing this
without problems.
>
> > Long story short, this is what happens:
>
> > May 27 15:43:09 ldap_db puppetmasterd[26986]: Starting Puppet server
> > version 0.24.4
> > May 27 15:43:20 ldap_db puppetd[27001]: Creating a new certificate
> > request for ldap_db.foo.bar
> > May 27 15:43:20 ldap_db puppetd[27001]: Creating a new SSL key at
/etc/
> > puppet/ssl/private_keys/ldap_db.foo.bar.pem
> > May 27 15:43:20 ldap_db puppetmasterd[26986]: Allowing unauthenticated
> > client ldap_db.foo.bar(10.10.10.1) access to puppetca.getcert
> > May 27 15:43:20 ldap_db puppetmasterd[26986]: Certificate request does
> > not match existing certificate; run ''puppetca --clean
> > ldap_db.foo.bar''.
>
> That already smells. In my recollection the puppetmaster, when starting the
> first time, creates AND signs his own certificate. Are you sure your
> DNS/hosts file match with what puppet thinks the certname should be and
> everything?
>
> If it is at all possible, try to shutdown puppet and puppetmaster on the
> machine, move away $vardir/ssl''s contents and start over by
starting the
> pupetmaster. This should create a new Certificate Authority and a new
> certified key for the host.
>
> Regards, DavidS
>
> - --
> The primary freedom of open source is not the freedom from cost, but the
free-
> dom to shape software to do what you want. This freedom is /never/
exercised
> without cost, but is available /at all/ only by accepting the very
different
> costs associated with open source, costs not in money, but in time and
effort.
> - --http://www.schierer.org/~luke/log/20070710-1129/on-forks-and-forking
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
>
> iD8DBQFIPl9G/Pp1N6Uzh0URAnmbAJ4nDDQpbrsNed7YpafwLMHJvAKO+ACfWr4f
> n0ykhn1zTEbrRRRxPcrRjBU> =JX1w
> -----END PGP SIGNATURE-----
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thursday 29 May 2008, Stasheck wrote:
> Now to the point: since I didn''t deploy puppet on any other
machine on
> the site, I erased all ssl dirs in order for puppet to regenerate
> them. So, I deleted
> /etc/puppet/ssl (that''s for puppetd, right?) and
/var/lib/puppet/ssl
> (that''s for puppetmasterd, if I''m not mistaken).
No, that''s definitely a misconfiguration, both puppetd and puppetmaster
should
access the same ssldir. There were several version of puppet in debian which 
shipped a strange puppet.conf. Current versions should have that fixed. 
Alternatively you can just set puppetd''s ssldir to /var/lib/puppet/ssl
where
it should be.

Regards, DavidS
- -- 
The primary freedom of open source is not the freedom from cost, but the free-
dom to shape software to do what you want. This freedom is /never/ exercised
without cost, but is available /at all/ only by accepting the very different
costs associated with open source, costs not in money, but in time and effort.
- -- http://www.schierer.org/~luke/log/20070710-1129/on-forks-and-forking
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFIPn2X/Pp1N6Uzh0URAqgTAJ49FFQPiYSIFc5IG4gHmR8N97+bUQCghuXk
1dqzb6N+hcYFaW+HB1RF8Hk=RJ4H
-----END PGP SIGNATURE-----

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

OK, first I didn''t say that I use puppet from reductivelabs tgz, I
just used puppetmaster init script from Ubuntu :-)

Now I fixed ssl dir on puppetd, so it''s in /var/lib/puppet (notice: I
have already configured my previous site with wrong ssl dir''s settings
- how can I use puppet to copy all this files to /var/lib/puppet/ssl,
so then when I''ll change puppetd.conf file everything will still work
without the need for recreating certificates?).

Unfotunately, fixing this didn''t solve the problem - or should I say,
brought another one.

Now, master starts correctly (Starting Puppet server version 0.24.4),
but client:

puppetd: Starting Puppet client version 0.24.4
puppetmasterd: Denying authenticated client
ldap_db.foo.bar(10.10.10.1) access to puppetmaster.getconfig
puppetd: Could not call puppetmaster.getconfig: #<NoMethodError:
private method ''split'' called for nil:NilClass>
puppetd: Could not retrieve catalog: private method ''split''
called for
nil:NilClass

and then - silence. Why does puppetmaster denies access? I''ve been
looking for appropriate conf options, but I have to be missing
something. Could you help me?

regards,
Stanislaw

On May 29, 11:55 am, David Schmitt <da...@schmitt.edv-bus.at>
wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Thursday 29 May 2008, Stasheck wrote:
>
> > Now to the point: since I didn''t deploy puppet on any other
machine on
> > the site, I erased all ssl dirs in order for puppet to regenerate
> > them. So, I deleted
> > /etc/puppet/ssl (that''s for puppetd, right?) and
/var/lib/puppet/ssl
> > (that''s for puppetmasterd, if I''m not mistaken).
>
> No, that''s definitely a misconfiguration, both puppetd and
puppetmaster should
> access the same ssldir. There were several version of puppet in debian
which
> shipped a strange puppet.conf. Current versions should have that fixed.
> Alternatively you can just set puppetd''s ssldir to
/var/lib/puppet/ssl where
> it should be.
>
> Regards, DavidS
> - --
> The primary freedom of open source is not the freedom from cost, but the
free-
> dom to shape software to do what you want. This freedom is /never/
exercised
> without cost, but is available /at all/ only by accepting the very
different
> costs associated with open source, costs not in money, but in time and
effort.
> - --http://www.schierer.org/~luke/log/20070710-1129/on-forks-and-forking
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
>
> iD8DBQFIPn2X/Pp1N6Uzh0URAqgTAJ49FFQPiYSIFc5IG4gHmR8N97+bUQCghuXk
> 1dqzb6N+hcYFaW+HB1RF8Hk> =RJ4H
> -----END PGP SIGNATURE-----
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thursday 29 May 2008, Stasheck wrote:
> Now I fixed ssl dir on puppetd, so it''s in /var/lib/puppet
(notice: I
> have already configured my previous site with wrong ssl dir''s
settings
> - how can I use puppet to copy all this files to /var/lib/puppet/ssl,
> so then when I''ll change puppetd.conf file everything will still
work
> without the need for recreating certificates?).
Probably it''d be enough to just move/copy the files over to the new
location.
Watch out for file-conflicts too, that might cause hairy moments.
> Now, master starts correctly (Starting Puppet server version 0.24.4),
> but client:
>
> puppetd: Starting Puppet client version 0.24.4
> puppetmasterd: Denying authenticated client
> ldap_db.foo.bar(10.10.10.1) access to puppetmaster.getconfig
> puppetd: Could not call puppetmaster.getconfig: #<NoMethodError:
> private method ''split'' called for nil:NilClass>
> puppetd: Could not retrieve catalog: private method
''split'' called for
> nil:NilClass
That doesn''t look good. When puppet doesn''t give any
customized error message
but throws a ruby error, that''s usually a sign for a programming error.
Please run both the master and the client with --trace and post the result. 
that should give good indications where the error really occurs.


Regards, DavidS
- -- 
The primary freedom of open source is not the freedom from cost, but the free-
dom to shape software to do what you want. This freedom is /never/ exercised
without cost, but is available /at all/ only by accepting the very different
costs associated with open source, costs not in money, but in time and effort.
- -- http://www.schierer.org/~luke/log/20070710-1129/on-forks-and-forking
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFIPqUj/Pp1N6Uzh0URAqoYAJ4kxpfGGczZSnDLwCtV8qswOFZSAwCePHXT
TJfNQlcaCVIhZOyAhNuM250=W87z
-----END PGP SIGNATURE-----

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Here''s debug, provided by isuing # puppetmasterd -v --trace and #
puppetd --debug --verbose - BTW, when I used --no-daemonize with
puppetmasterd it caught segfault after starting puppetd.

May 29 15:13:15 ldap_db puppetmasterd[21262]: Starting server for
Puppet version 0.24.4
May 29 15:13:16 ldap_db puppetmasterd[21262]: (mount[facts]) allowing
*.foo.bar access
May 29 15:13:16 ldap_db puppetmasterd[21262]: Listening on port 8140
May 29 15:13:16 ldap_db puppetmasterd[21287]: Reopening log files
May 29 15:13:16 ldap_db puppetmasterd[21287]: Starting Puppet server
version 0.24.4
May 29 15:13:47 ldap_db puppetd[21354]: Creating default schedules
May 29 15:13:47 ldap_db puppetd[21354]: Failed to load library
''shadow'' for feature ''libshadow''
May 29 15:13:47 ldap_db puppetd[21354]: (/Settings[/etc/puppet/
puppetd.conf]/Settings[ssl]/File[/var/lib/puppet/ssl/public_keys/
ldap_db.foo.bar.pem]) Autorequiring File[/var/lib/puppet/ssl/
public_keys]
May 29 15:13:47 ldap_db puppetd[21354]: (/Settings[/etc/puppet/
puppetd.conf]/Settings[ssl]/File[/var/lib/puppet/ssl/certs/
ldap_db.foo.bar.pem]) Autorequiring File[/var/lib/puppet/ssl/certs]
May 29 15:13:47 ldap_db puppetd[21354]: (/Settings[/etc/puppet/
puppetd.conf]/Settings[main]/File[/var/lib/puppet/lib]) Autorequiring
File[/var/lib/puppet]
May 29 15:13:47 ldap_db puppetd[21354]: (/Settings[/etc/puppet/
puppetd.conf]/Settings[main]/File[/etc/puppet/namespaceauth.conf])
Autorequiring File[/etc/puppet]
May 29 15:13:47 ldap_db puppetd[21354]: (/Settings[/etc/puppet/
puppetd.conf]/Settings[ssl]/File[/var/lib/puppet/ssl/private_keys])
Autorequiring File[/var/lib/puppet/ssl]
May 29 15:13:47 ldap_db puppetd[21354]: (/Settings[/etc/puppet/
puppetd.conf]/Settings[puppetd]/File[/etc/puppet/puppet.conf])
Autorequiring File[/etc/puppet]
May 29 15:13:47 ldap_db puppetd[21354]: (/Settings[/etc/puppet/
puppetd.conf]/Settings[ssl]/File[/var/lib/puppet/ssl/private_keys/
ldap_db.foo.bar.pem]) Autorequiring File[/var/lib/puppet/ssl/
private_keys]
May 29 15:13:47 ldap_db puppetd[21354]: (/Settings[/etc/puppet/
puppetd.conf]/Settings[ssl]/File[/var/lib/puppet/ssl/public_keys])
Autorequiring File[/var/lib/puppet/ssl]
May 29 15:13:47 ldap_db puppetd[21354]: (/Settings[/etc/puppet/
puppetd.conf]/Settings[ssl]/File[/var/lib/puppet/ssl/certs])
Autorequiring File[/var/lib/puppet/ssl]
May 29 15:13:47 ldap_db puppetd[21354]: (/Settings[/etc/puppet/
puppetd.conf]/Settings[ssl]/File[/var/lib/puppet/ssl/
csr_ldap_db.foo.bar.pem]) Autorequiring File[/var/lib/puppet/ssl]
May 29 15:13:47 ldap_db puppetd[21354]: (/Settings[/etc/puppet/
puppetd.conf]/Settings[ssl]/File[/var/lib/puppet/ssl/private])
Autorequiring File[/var/lib/puppet/ssl]
May 29 15:13:47 ldap_db puppetd[21354]: (/Settings[/etc/puppet/
puppetd.conf]/Settings[ssl]/File[/var/lib/puppet/ssl/certs/ca.pem])
Autorequiring File[/var/lib/puppet/ssl/certs]
May 29 15:13:47 ldap_db puppetd[21354]: (/Settings[/etc/puppet/
puppetd.conf]/Settings[puppetd]/File[/var/log/puppet/http.log])
Autorequiring File[/var/log/puppet]
May 29 15:13:47 ldap_db puppetd[21354]: (/Settings[/etc/puppet/
puppetd.conf]/Settings[main]/File[/var/lib/puppet/state])
Autorequiring File[/var/lib/puppet]
May 29 15:13:47 ldap_db puppetd[21354]: (/Settings[/etc/puppet/
puppetd.conf]/Settings[puppetd]/File[/var/lib/puppet/ssl])
Autorequiring File[/var/lib/puppet]
May 29 15:13:47 ldap_db puppetd[21354]: Finishing transaction
540444720 with 0 changes
May 29 15:13:47 ldap_db puppetd[21373]: Reopening log files
May 29 15:13:47 ldap_db puppetd[21373]: Starting handler for Runner
May 29 15:13:47 ldap_db puppetd[21373]: Starting server for Puppet
version 0.24.4
May 29 15:13:47 ldap_db puppetd[21373]: Listening on port 8139
May 29 15:13:47 ldap_db puppetd[21373]: Starting Puppet client version
0.24.4
May 29 15:13:47 ldap_db puppetd[21373]: Retrieved facts in 0.06
seconds
May 29 15:13:47 ldap_db puppetd[21373]: Retrieving catalog
May 29 15:13:47 ldap_db puppetd[21373]: Calling puppetmaster.getconfig
May 29 15:13:48 ldap_db puppetmasterd[21287]: (access[puppetrunner])
allowing ldap_db.foo.bar access
May 29 15:13:48 ldap_db puppetmasterd[21287]: Denying authenticated
client ldap_db.foo.bar(10.10.10.1) access to puppetmaster.getconfig
May 29 15:13:48 ldap_db puppetd[21373]: Could not call
puppetmaster.getconfig: #<NoMethodError: private method `split''
called
for nil:NilClass>
May 29 15:13:48 ldap_db puppetd[21373]: Could not retrieve catalog:
private method `split'' called for nil:NilClass

Does this says anything to you?

regards,
Stanislaw


On May 29, 2:44 pm, David Schmitt <da...@schmitt.edv-bus.at>
wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Thursday 29 May 2008, Stasheck wrote:
>
> > Now I fixed ssl dir on puppetd, so it''s in /var/lib/puppet
(notice: I
> > have already configured my previous site with wrong ssl dir''s
settings
> > - how can I use puppet to copy all this files to /var/lib/puppet/ssl,
> > so then when I''ll change puppetd.conf file everything will
still work
> > without the need for recreating certificates?).
>
> Probably it''d be enough to just move/copy the files over to the
new location.
> Watch out for file-conflicts too, that might cause hairy moments.
>
> > Now, master starts correctly (Starting Puppet server version 0.24.4),
> > but client:
>
> > puppetd: Starting Puppet client version 0.24.4
> > puppetmasterd: Denying authenticated client
> > ldap_db.foo.bar(10.10.10.1) access to puppetmaster.getconfig
> > puppetd: Could not call puppetmaster.getconfig: #<NoMethodError:
> > private method ''split'' called for nil:NilClass>
> > puppetd: Could not retrieve catalog: private method
''split'' called for
> > nil:NilClass
>
> That doesn''t look good. When puppet doesn''t give any
customized error message
> but throws a ruby error, that''s usually a sign for a programming
error.
> Please run both the master and the client with --trace and post the result.
> that should give good indications where the error really occurs.
>
> Regards, DavidS
> - --
> The primary freedom of open source is not the freedom from cost, but the
free-
> dom to shape software to do what you want. This freedom is /never/
exercised
> without cost, but is available /at all/ only by accepting the very
different
> costs associated with open source, costs not in money, but in time and
effort.
> - --http://www.schierer.org/~luke/log/20070710-1129/on-forks-and-forking
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
>
> iD8DBQFIPqUj/Pp1N6Uzh0URAqoYAJ4kxpfGGczZSnDLwCtV8qswOFZSAwCePHXT
> TJfNQlcaCVIhZOyAhNuM250> =W87z
> -----END PGP SIGNATURE-----
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thursday 29 May 2008, Stasheck wrote:
> Here''s debug, provided by isuing # puppetmasterd -v --trace and #
> puppetd --debug --verbose - BTW, when I used --no-daemonize with
> puppetmasterd it caught segfault after starting puppetd.
If it really was a segfault - which I don''t believe - then there is
nothing
puppet can do. That would be a bad ruby version then. 
> May 29 15:13:47 ldap_db puppetd[21373]: Retrieving catalog
> May 29 15:13:47 ldap_db puppetd[21373]: Calling puppetmaster.getconfig
> May 29 15:13:48 ldap_db puppetmasterd[21287]: (access[puppetrunner])
> allowing ldap_db.foo.bar access
> May 29 15:13:48 ldap_db puppetmasterd[21287]: Denying authenticated
> client ldap_db.foo.bar(10.10.10.1) access to puppetmaster.getconfig
> May 29 15:13:48 ldap_db puppetd[21373]: Could not call
> puppetmaster.getconfig: #<NoMethodError: private method `split''
called
> for nil:NilClass>
> May 29 15:13:48 ldap_db puppetd[21373]: Could not retrieve catalog:
> private method `split'' called for nil:NilClass
- --trace output should come directly after these messages. And I don''t
think it
goes to syslog.




Regards, DavidS
- -- 
The primary freedom of open source is not the freedom from cost, but the free-
dom to shape software to do what you want. This freedom is /never/ exercised
without cost, but is available /at all/ only by accepting the very different
costs associated with open source, costs not in money, but in time and effort.
- -- http://www.schierer.org/~luke/log/20070710-1129/on-forks-and-forking
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFIPsNt/Pp1N6Uzh0URAl8TAKCZ0wjr9gR+vJn3Brs4u/5HEY+ZMgCgm3TB
bks4RwLjxSTRzQ3fas14nw0=YKyf
-----END PGP SIGNATURE-----

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

OK, one more time :-) First puppetmasterd debug, then puppetmaster. I
still cannot see anything, despite turning on every debug option I
could find :/

# puppetmasterd --debug --no-daemonize --verbose
info: Starting server for Puppet version 0.24.4
debug: Creating default schedules
debug: Failed to load library ''shadow'' for feature
''libshadow''
debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
puppet/state]: Autorequiring File[/var/lib/puppet]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
puppet/lib]: Autorequiring File[/var/lib/puppet]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
puppet/ssl]: Autorequiring File[/var/lib/puppet]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/etc/
puppet/namespaceauth.conf]: Autorequiring File[/etc/puppet]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[metrics]/File[/var/
lib/puppet/rrd]: Autorequiring File[/var/lib/puppet]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[reporting]/File[/
var/lib/puppet/reports]: Autorequiring File[/var/lib/puppet]
debug: Finishing transaction 539156074 with 0 changes
debug: Creating default schedules
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/ca_pub.pem]: Autorequiring File[/var/lib/puppet/ssl/ca]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/public_keys/ldap_db.foo.bar.pem]: Autorequiring File[/var/
lib/puppet/ssl/public_keys]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/certs/ldap_db.foo.bar.pem]: Autorequiring File[/var/lib/
puppet/ssl/certs]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/ca_crl.pem]: Autorequiring File[/var/lib/puppet/ssl/ca]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/ca_crt.pem]: Autorequiring File[/var/lib/puppet/ssl/ca]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/private]: Autorequiring File[/var/lib/puppet/ssl/ca]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/ca_key.pem]: Autorequiring File[/var/lib/puppet/ssl/ca]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/private_keys/ldap_db.foo.bar.pem]: Autorequiring File[/var/
lib/puppet/ssl/private_keys]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/signed]: Autorequiring File[/var/lib/puppet/ssl/ca]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/serial]: Autorequiring File[/var/lib/puppet/ssl/ca]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/inventory.txt]: Autorequiring File[/var/lib/puppet/ssl/
ca]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/certs/ca.pem]: Autorequiring File[/var/lib/puppet/ssl/
certs]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/private/ca.pass]: Autorequiring File[/var/lib/puppet/ssl/
ca/private]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/requests]: Autorequiring File[/var/lib/puppet/ssl/ca]
debug: Finishing transaction 540165130 with 0 changes
debug: Creating default schedules
debug: Finishing transaction 539095204 with 0 changes
info: mount[facts]: allowing *.foo.bar access
info: mount[test-module]: allowing *.foo.bar access
info: mount[puppetfiles]: allowing *.foo.bar access
info: mount[common]: allowing *.foo.bar access
info: mount[nut]: allowing *.foo.bar access
info: mount[dhcp]: allowing *.foo.bar access
debug: No modules mount given; autocreating with default permissions
debug: No plugins mount given; autocreating with default permissions
debug: Creating interpreter
debug: Creating default schedules
debug: /Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/
File[/etc/puppet/manifests/site.pp]: Autorequiring File[/etc/puppet/
manifests]
debug: Finishing transaction 539804570 with 0 changes
debug: Creating default schedules
debug: /Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/
File[/etc/puppet/manifests/site.pp]: Autorequiring File[/etc/puppet/
manifests]
debug: Finishing transaction 540010310 with 0 changes
debug: Creating default schedules
debug: /Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/
File[/etc/puppet/manifests/site.pp]: Autorequiring File[/etc/puppet/
manifests]
debug: Finishing transaction 540623830 with 0 changes
info: Listening on port 8140
notice: Starting Puppet server version 0.24.4
info: access[puppetrunner]: allowing ldap_db.foo.bar access
notice: Denying authenticated client ldap_db.foo.bar(10.10.10.1)
access to puppetmaster.getconfig



# puppetd --verbose --test --debug --no-daemonize
debug: Creating default schedules
debug: Failed to load library ''shadow'' for feature
''libshadow''
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[puppetd]/File[/var/
log/puppet/http.log]: Autorequiring File[/var/log/puppet]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/public_keys/ldap_db.foo.bar.pem]: Autorequiring File[/var/
lib/puppet/ssl/public_keys]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/certs/ldap_db.foo.bar.pem]: Autorequiring File[/var/lib/
puppet/ssl/certs]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[puppetd]/File[/var/
lib/puppet/ssl]: Autorequiring File[/var/lib/puppet]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[puppetd]/File[/etc/
puppet/puppet.conf]: Autorequiring File[/etc/puppet]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[main]/File[/var/
lib/puppet/lib]: Autorequiring File[/var/lib/puppet]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[main]/File[/etc/
puppet/namespaceauth.conf]: Autorequiring File[/etc/puppet]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/private_keys]: Autorequiring File[/var/lib/puppet/ssl]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/private_keys/ldap_db.foo.bar.pem]: Autorequiring File[/var/
lib/puppet/ssl/private_keys]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/public_keys]: Autorequiring File[/var/lib/puppet/ssl]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/certs]: Autorequiring File[/var/lib/puppet/ssl]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/csr_ldap_db.foo.bar.pem]: Autorequiring File[/var/lib/
puppet/ssl]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/private]: Autorequiring File[/var/lib/puppet/ssl]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/certs/ca.pem]: Autorequiring File[/var/lib/puppet/ssl/
certs]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[main]/File[/var/
lib/puppet/state]: Autorequiring File[/var/lib/puppet]
debug: Finishing transaction 540441540 with 0 changes
notice: Ignoring --listen on onetime run
Try `uname --help'' for more information.
debug: Retrieved facts in 0.06 seconds
debug: Retrieving catalog
debug: Calling puppetmaster.getconfig
err: Could not call puppetmaster.getconfig: #<NoMethodError: private
method `split'' called for nil:NilClass>
err: Could not retrieve catalog: private method `split'' called for
nil:NilClass
warning: Not using cache on failed catalog


Regards,
Stanislaw

On May 29, 4:53 pm, David Schmitt <da...@schmitt.edv-bus.at>
wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Thursday 29 May 2008, Stasheck wrote:
>
> > Here''s debug, provided by isuing # puppetmasterd -v --trace
and #
> > puppetd --debug --verbose - BTW, when I used --no-daemonize with
> > puppetmasterd it caught segfault after starting puppetd.
>
> If it really was a segfault - which I don''t believe - then there
is nothing
> puppet can do. That would be a bad ruby version then.
>
> > May 29 15:13:47 ldap_db puppetd[21373]: Retrieving catalog
> > May 29 15:13:47 ldap_db puppetd[21373]: Calling puppetmaster.getconfig
> > May 29 15:13:48 ldap_db puppetmasterd[21287]: (access[puppetrunner])
> > allowing ldap_db.foo.bar access
> > May 29 15:13:48 ldap_db puppetmasterd[21287]: Denying authenticated
> > client ldap_db.foo.bar(10.10.10.1) access to puppetmaster.getconfig
> > May 29 15:13:48 ldap_db puppetd[21373]: Could not call
> > puppetmaster.getconfig: #<NoMethodError: private method
`split'' called
> > for nil:NilClass>
> > May 29 15:13:48 ldap_db puppetd[21373]: Could not retrieve catalog:
> > private method `split'' called for nil:NilClass
>
> - --trace output should come directly after these messages. And I
don''t think it
> goes to syslog.
>
> Regards, DavidS
> - --
> The primary freedom of open source is not the freedom from cost, but the
free-
> dom to shape software to do what you want. This freedom is /never/
exercised
> without cost, but is available /at all/ only by accepting the very
different
> costs associated with open source, costs not in money, but in time and
effort.
> - --http://www.schierer.org/~luke/log/20070710-1129/on-forks-and-forking
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
>
> iD8DBQFIPsNt/Pp1N6Uzh0URAl8TAKCZ0wjr9gR+vJn3Brs4u/5HEY+ZMgCgm3TB
> bks4RwLjxSTRzQ3fas14nw0> =YKyf
> -----END PGP SIGNATURE-----
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

On May 30, 2008, at 8:12 AM, Stasheck wrote:
> notice: Denying authenticated client ldap_db.foo.bar(10.10.10.1)
> access to puppetmaster.getconfig

Do you have a namespaceauth.conf?  If so, does it specifically allow  
the ''puppetmaster'' namespace?

-- 
We cannot really love anybody with whom we never laugh.
     --Agnes Repplier
---------------------------------------------------------------------
Luke Kanies | http://reductivelabs.com | http://madstop.com


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

In fact, I have. Only now, when you said that, I searched reductive
for it''s correct syntax and I have found this
http://reductivelabs.com/trac/puppet/browser/conf/namespaceauth.conf.
To date, I only used it to allow puppetrunner.  Is this possible that
in the documentation there''s no mentioning that once you have
namespaceauth.conf no defaults are used?

Unfortunately, it solved one problem, but I''ve run into another.

puppetmasterd:
# puppetmasterd --debug --no-daemonize --verbose
info: Starting server for Puppet version 0.24.4
debug: Creating default schedules
debug: Failed to load library ''shadow'' for feature
''libshadow''
debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
puppet/state]: Autorequiring File[/var/lib/puppet]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
puppet/lib]: Autorequiring File[/var/lib/puppet]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
puppet/ssl]: Autorequiring File[/var/lib/puppet]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/etc/
puppet/namespaceauth.conf]: Autorequiring File[/etc/puppet]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[metrics]/File[/var/
lib/puppet/rrd]: Autorequiring File[/var/lib/puppet]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[reporting]/File[/
var/lib/puppet/reports]: Autorequiring File[/var/lib/puppet]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
puppet/state]: File does not exist
debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
puppet/state]: Changing ensure
debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
puppet/state]: 1 change(s)
debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
puppet/state]/ensure: created
debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
puppet/ssl]: File does not exist
debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
puppet/ssl]: Changing ensure
debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
puppet/ssl]: 1 change(s)
debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
puppet/ssl]/ensure: created
debug: Finishing transaction 539156064 with 2 changes
debug: Creating default schedules
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/private]: Autorequiring File[/var/lib/puppet/ssl/ca]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/requests]: Autorequiring File[/var/lib/puppet/ssl/ca]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/signed]: Autorequiring File[/var/lib/puppet/ssl/ca]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/private]: File does not exist
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/private]: Changing ensure
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/private]: 1 change(s)
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/private]/ensure: created
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/public_keys]: File does not exist
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/public_keys]: Changing ensure
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/public_keys]: 1 change(s)
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/public_keys]/ensure: created
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca]: File does not exist
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca]: Changing ensure
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca]: 1 change(s)
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca]/ensure: created
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/signed]: File does not exist
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/signed]: Changing ensure
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/signed]: 1 change(s)
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/signed]/ensure: created
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/requests]: File does not exist
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/requests]: Changing ensure
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/requests]: 1 change(s)
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/requests]/ensure: created
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/private]: File does not exist
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/private]: Changing ensure
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/private]: 1 change(s)
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
puppet/ssl/ca/private]/ensure: created
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/private_keys]: File does not exist
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/private_keys]: Changing ensure
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/private_keys]: 1 change(s)
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/private_keys]/ensure: created
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/certs]: File does not exist
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/certs]: Changing ensure
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/certs]: 1 change(s)
debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/certs]/ensure: created
debug: Finishing transaction 539544234 with 8 changes
debug: Creating default schedules
debug: Finishing transaction 539963530 with 0 changes
info: mount[facts]: allowing *.foo.bar access
info: mount[test-module]: allowing *.foo.bar access
info: mount[puppetfiles]: allowing *.foo.bar access
info: mount[common]: allowing *.foo.bar access
info: mount[nut]: allowing *.foo.bar access
info: mount[dhcp]: allowing *.foo.bar access
debug: No modules mount given; autocreating with default permissions
debug: No plugins mount given; autocreating with default permissions
debug: Creating interpreter
info: Creating a new certificate request for ldap_db.foo.bar
info: Creating a new SSL key at /var/lib/puppet/ssl/private_keys/
ldap_db.foo.bar.pem
info: Autosign is enabled but /etc/puppet/autosign.conf is missing
info: Signing certificate for CA server
info: Signing certificate for ldap_db.foo.bar
debug: Creating default schedules
debug: /Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/
File[/etc/puppet/manifests/site.pp]: Autorequiring File[/etc/puppet/
manifests]
debug: /Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/
File[/var/lib/puppet/yaml]: File does not exist
debug: /Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/
File[/var/lib/puppet/yaml]: Changing ensure
debug: /Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/
File[/var/lib/puppet/yaml]: 1 change(s)
debug: /Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/
File[/var/lib/puppet/yaml]/ensure: created
debug: Finishing transaction 540053480 with 1 changes
debug: Creating default schedules
debug: /Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/
File[/etc/puppet/manifests/site.pp]: Autorequiring File[/etc/puppet/
manifests]
debug: Finishing transaction 540345670 with 0 changes
debug: Creating default schedules
debug: /Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/
File[/etc/puppet/manifests/site.pp]: Autorequiring File[/etc/puppet/
manifests]
debug: Finishing transaction 539526374 with 0 changes
info: Listening on port 8140
notice: Starting Puppet server version 0.24.4

puppetd:

# puppetd --test --debug --verbose --no-daemonize
debug: Creating default schedules
debug: Failed to load library ''shadow'' for feature
''libshadow''
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/certs/ldap_db.foo.bar.pem]: Autorequiring File[/var/lib/
puppet/ssl/certs]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[puppetd]/File[/etc/
puppet/puppet.conf]: Autorequiring File[/etc/puppet]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[main]/File[/var/
lib/puppet/lib]: Autorequiring File[/var/lib/puppet]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[main]/File[/etc/
puppet/namespaceauth.conf]: Autorequiring File[/etc/puppet]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/private_keys]: Autorequiring File[/var/lib/puppet/ssl]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/private_keys/ldap_db.foo.bar.pem]: Autorequiring File[/var/
lib/puppet/ssl/private_keys]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/public_keys]: Autorequiring File[/var/lib/puppet/ssl]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/certs]: Autorequiring File[/var/lib/puppet/ssl]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/csr_ldap_db.foo.bar.pem]: Autorequiring File[/var/lib/
puppet/ssl]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/private]: Autorequiring File[/var/lib/puppet/ssl]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/certs/ca.pem]: Autorequiring File[/var/lib/puppet/ssl/
certs]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[puppetd]/File[/var/
log/puppet/http.log]: Autorequiring File[/var/log/puppet]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[main]/File[/var/
lib/puppet/state]: Autorequiring File[/var/lib/puppet]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[puppetd]/File[/var/
lib/puppet/ssl]: Autorequiring File[/var/lib/puppet]
debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
puppet/ssl/public_keys/ldap_db.foo.bar.pem]: Autorequiring File[/var/
lib/puppet/ssl/public_keys]
debug: Finishing transaction 540441000 with 0 changes
notice: Ignoring --listen on onetime run
debug: Puppet::Network::Client::File: defining fileserver.describe
debug: Puppet::Network::Client::File: defining fileserver.list
debug: Puppet::Network::Client::File: defining fileserver.retrieve
info: Retrieving facts
debug: Calling fileserver.list
err: /File[/var/lib/puppet/facts]: Failed to generate additional
resources during transaction: Certificates were not trusted: hostname
not match
debug: /File[/var/lib/puppet/facts]: File does not exist
debug: Calling fileserver.describe
err: /File[/var/lib/puppet/facts]/source: Could not describe /facts:
Certificates were not trusted: hostname not match
warning: /File[/var/lib/puppet/facts]/ensure: No specified sources
exist
debug: Finishing transaction 539685030 with 0 changes
Try `uname --help'' for more information.
debug: Retrieved facts in 0.34 seconds
debug: Retrieving catalog
debug: Calling puppetmaster.getconfig
err: Could not retrieve catalog: Certificates were not trusted:
hostname not match
warning: Not using cache on failed catalog


How is that possible? I mean, the certificate was issued for ldap_db
puppetmasterd, but hostname does not match for puppetd? I don''t
understand it. Do you?

regards,
Stanislaw

PS. It''s not the first time that I have problems with puppet conf
files only because I didn''t know there should be one, or I
didn''t know
what the defaults are. Is this possible to add a page to wiki listing
all configuration files? They are described, but one have to
specifically search for given conf file - which can''t be done when you
don''t know that it exists.

Or maybe I''m that stupid ;-)


On May 30, 4:57 pm, Luke Kanies <l...@madstop.com>
wrote:
> On May 30, 2008, at 8:12 AM, Stasheck wrote:
>
> > notice: Denying authenticated client ldap_db.foo.bar(10.10.10.1)
> > access to puppetmaster.getconfig
>
> Do you have a namespaceauth.conf?  If so, does it specifically allow  
> the ''puppetmaster'' namespace?
>
> --
> We cannot really love anybody with whom we never laugh.
>      --Agnes Repplier
> ---------------------------------------------------------------------
> Luke Kanies |http://reductivelabs.com|http://madstop.com
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

After all I''ve found some typos in conf files - I was using alias for
fileserver''s name. Real name is ldap_db, I was using puppetmaster
(which resolves fine, it''s just SSL which doesn''t like aliases
:-) ).
So, after all of this, my second Puppet install is now fully
operational. Yay!

Many thanks for everyone who helped me!

Regards,
Stanislaw

On Jun 2, 10:24 am, Stasheck <stanislaw.kamin...@gmail.com>
wrote:
> In fact, I have. Only now, when you said that, I searched reductive
> for it''s correct syntax and I have found
thishttp://reductivelabs.com/trac/puppet/browser/conf/namespaceauth.conf.
> To date, I only used it to allow puppetrunner.  Is this possible that
> in the documentation there''s no mentioning that once you have
> namespaceauth.conf no defaults are used?
>
> Unfortunately, it solved one problem, but I''ve run into another.
>
> puppetmasterd:
> # puppetmasterd --debug --no-daemonize --verbose
> info: Starting server for Puppet version 0.24.4
> debug: Creating default schedules
> debug: Failed to load library ''shadow'' for feature
''libshadow''
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
> puppet/state]: Autorequiring File[/var/lib/puppet]
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
> puppet/lib]: Autorequiring File[/var/lib/puppet]
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
> puppet/ssl]: Autorequiring File[/var/lib/puppet]
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/etc/
> puppet/namespaceauth.conf]: Autorequiring File[/etc/puppet]
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[metrics]/File[/var/
> lib/puppet/rrd]: Autorequiring File[/var/lib/puppet]
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[reporting]/File[/
> var/lib/puppet/reports]: Autorequiring File[/var/lib/puppet]
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
> puppet/state]: File does not exist
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
> puppet/state]: Changing ensure
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
> puppet/state]: 1 change(s)
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
> puppet/state]/ensure: created
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
> puppet/ssl]: File does not exist
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
> puppet/ssl]: Changing ensure
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
> puppet/ssl]: 1 change(s)
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/
> puppet/ssl]/ensure: created
> debug: Finishing transaction 539156064 with 2 changes
> debug: Creating default schedules
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
> puppet/ssl/ca/private]: Autorequiring File[/var/lib/puppet/ssl/ca]
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
> puppet/ssl/ca/requests]: Autorequiring File[/var/lib/puppet/ssl/ca]
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
> puppet/ssl/ca/signed]: Autorequiring File[/var/lib/puppet/ssl/ca]
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/private]: File does not exist
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/private]: Changing ensure
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/private]: 1 change(s)
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/private]/ensure: created
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/public_keys]: File does not exist
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/public_keys]: Changing ensure
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/public_keys]: 1 change(s)
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/public_keys]/ensure: created
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
> puppet/ssl/ca]: File does not exist
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
> puppet/ssl/ca]: Changing ensure
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
> puppet/ssl/ca]: 1 change(s)
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
> puppet/ssl/ca]/ensure: created
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
> puppet/ssl/ca/signed]: File does not exist
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
> puppet/ssl/ca/signed]: Changing ensure
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
> puppet/ssl/ca/signed]: 1 change(s)
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
> puppet/ssl/ca/signed]/ensure: created
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
> puppet/ssl/ca/requests]: File does not exist
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
> puppet/ssl/ca/requests]: Changing ensure
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
> puppet/ssl/ca/requests]: 1 change(s)
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
> puppet/ssl/ca/requests]/ensure: created
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
> puppet/ssl/ca/private]: File does not exist
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
> puppet/ssl/ca/private]: Changing ensure
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
> puppet/ssl/ca/private]: 1 change(s)
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ca]/File[/var/lib/
> puppet/ssl/ca/private]/ensure: created
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/private_keys]: File does not exist
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/private_keys]: Changing ensure
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/private_keys]: 1 change(s)
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/private_keys]/ensure: created
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/certs]: File does not exist
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/certs]: Changing ensure
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/certs]: 1 change(s)
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/certs]/ensure: created
> debug: Finishing transaction 539544234 with 8 changes
> debug: Creating default schedules
> debug: Finishing transaction 539963530 with 0 changes
> info: mount[facts]: allowing *.foo.bar access
> info: mount[test-module]: allowing *.foo.bar access
> info: mount[puppetfiles]: allowing *.foo.bar access
> info: mount[common]: allowing *.foo.bar access
> info: mount[nut]: allowing *.foo.bar access
> info: mount[dhcp]: allowing *.foo.bar access
> debug: No modules mount given; autocreating with default permissions
> debug: No plugins mount given; autocreating with default permissions
> debug: Creating interpreter
> info: Creating a new certificate request for ldap_db.foo.bar
> info: Creating a new SSL key at /var/lib/puppet/ssl/private_keys/
> ldap_db.foo.bar.pem
> info: Autosign is enabled but /etc/puppet/autosign.conf is missing
> info: Signing certificate for CA server
> info: Signing certificate for ldap_db.foo.bar
> debug: Creating default schedules
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/
> File[/etc/puppet/manifests/site.pp]: Autorequiring File[/etc/puppet/
> manifests]
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/
> File[/var/lib/puppet/yaml]: File does not exist
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/
> File[/var/lib/puppet/yaml]: Changing ensure
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/
> File[/var/lib/puppet/yaml]: 1 change(s)
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/
> File[/var/lib/puppet/yaml]/ensure: created
> debug: Finishing transaction 540053480 with 1 changes
> debug: Creating default schedules
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/
> File[/etc/puppet/manifests/site.pp]: Autorequiring File[/etc/puppet/
> manifests]
> debug: Finishing transaction 540345670 with 0 changes
> debug: Creating default schedules
> debug: /Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/
> File[/etc/puppet/manifests/site.pp]: Autorequiring File[/etc/puppet/
> manifests]
> debug: Finishing transaction 539526374 with 0 changes
> info: Listening on port 8140
> notice: Starting Puppet server version 0.24.4
>
> puppetd:
>
> # puppetd --test --debug --verbose --no-daemonize
> debug: Creating default schedules
> debug: Failed to load library ''shadow'' for feature
''libshadow''
> debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/certs/ldap_db.foo.bar.pem]: Autorequiring File[/var/lib/
> puppet/ssl/certs]
> debug: /Settings[/etc/puppet/puppetd.conf]/Settings[puppetd]/File[/etc/
> puppet/puppet.conf]: Autorequiring File[/etc/puppet]
> debug: /Settings[/etc/puppet/puppetd.conf]/Settings[main]/File[/var/
> lib/puppet/lib]: Autorequiring File[/var/lib/puppet]
> debug: /Settings[/etc/puppet/puppetd.conf]/Settings[main]/File[/etc/
> puppet/namespaceauth.conf]: Autorequiring File[/etc/puppet]
> debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/private_keys]: Autorequiring File[/var/lib/puppet/ssl]
> debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/private_keys/ldap_db.foo.bar.pem]: Autorequiring File[/var/
> lib/puppet/ssl/private_keys]
> debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/public_keys]: Autorequiring File[/var/lib/puppet/ssl]
> debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/certs]: Autorequiring File[/var/lib/puppet/ssl]
> debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/csr_ldap_db.foo.bar.pem]: Autorequiring File[/var/lib/
> puppet/ssl]
> debug: /Settings[/etc/puppet/puppetd.conf]/Settings[ssl]/File[/var/lib/
> puppet/ssl/private]: Autorequiring ...
>
> read more »
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---