[Puppet Users] Re: GRRR... cert issues

Jeff Leggett
Fri, 06 Jun 2008 18:37:24 -0000

Don''t know if this helps but I see:

Jun  6 14:33:51 lxp6d4m3 puppetmasterd[27011]: Allowing
unauthenticated client lxp6d15m3.etrade.com(::ffff:10.50.52.24) access
to puppetca.getcert
Jun  6 14:33:51 lxp6d4m3 puppetmasterd[27011]: Not replacing existing
request from lxp6d15m3.etrade.com

over and over in the log now too.

On Jun 6, 2:20 pm, Jeff Leggett <jeffrey.legg...@etrade.com>
wrote:
> I don''t know why I am having such problems... Anyway... I added a
new
> node to the mix... this being the first node that''s not also the
> puppetmaster.  I see this in the log:
>
> Jun  6 14:15:22 lxp6d4m3 puppetmasterd[26987]: Listening on port 8140
> Jun  6 14:15:22 lxp6d4m3 puppetmasterd[27011]: Reopening log files
> Jun  6 14:15:22 lxp6d4m3 puppetmasterd[27011]: Starting Puppet server
> version 0.24.4
> Jun  6 14:15:50 lxp6d4m3 puppetmasterd[27011]: Allowing
> unauthenticated client lxp6d15m3.etrade.com(::ffff:10.50.52.24) access
> to puppetca.getcert
> Jun  6 14:15:50 lxp6d4m3 puppetmasterd[27011]: Host
> lxp6d15m3.etrade.com has a waiting certificate request
>
> So I go over to the puppetmaster and issue:
>
> [jleggett@lxp6d4m3 puppet]$ puppetca --list
> No certificates to sign
> [jleggett@lxp6d4m3 puppet]$ sudo puppetca --list
> No certificates to sign
> [jleggett@lxp6d4m3 puppet]$ sudo puppetca --sign lxp6d15m3.etrade.com
> No certificates to sign
> [jleggett@lxp6d4m3 puppet]$
>
> WTF?!
>
> So I stop the puppetmaster daemon, and the client and move the ssl
> directory to a new name, then restart the puppetmaster as per the
> directions here:  http://reductivelabs.com/trac/puppet/wiki/RegenerateSSL
>
> Still no go?  What am I doing wrong?