[Puppet Users] Re: autosign issues

zoniguana
Tue, 14 Oct 2008 12:28:50 -0000

Thanks, Luke

That confirms what I was thinking.  Not a huge issue, I suspect; for
more immediate purposes, I probably would rather force myself to sign
manually anyway, for now.  By the time I am ready to enable
autosigning, we''ll probably be umpteen versions newer...

Thanks again!

On Oct 13, 11:12 am, Luke Kanies <l...@madstop.com>
wrote:
> On Oct 10, 2008, at 4:05 PM, zoniguana wrote:
>
>
>
> > Is there a way that I can simply use the hostname, without the domain,
> > to get an autosigned cert?
> > Alternatively, can I grant access to a block of IPs and have those
> > certs autosigned?
> > Do I need to add IP/name relations to the hosts file on the
> > pupetmaster to get it to recognize that they are one and the same?
>
> Autosigning does not currently support IP addresses, and you must use
> fully qualified names.
>
> --
> The reasonable man adapts himself to the world; the unreasonable one
> persists in trying to adapt the world to himself. Therefore all
> progress depends on the unreasonable man. -- George Bernard Shaw
> ---------------------------------------------------------------------
> Luke Kanies |http://reductivelabs.com|http://madstop.com