Puppet users - Nov 2008 - puppet -0.24.5-1.el4.x86_64 sl4 and error: Could not retrieve catalog: Certificates were not trusted: block type is not 01

Hi all,

last week I was able to configure client-server with a CentOs 5.2 and
Scientifi Linux 4 (RH ent 4).

Now, I must change my server to SL4, and my repos give me version 0.22,
and I found some problems with rrdtool, again.

So, I''d like to install version 0.24 using epel repos:
http://download.fedora.redhat.com/pub/epel/4/x86_64/

I can do it and seems to work on server but it gives me a warning:
Could not load confine test ''operatingsystem'': No such file to
load -- puppet/provider/confine/operatingsystem

(I''ve seen the old bug and I don''t care about it).

One important thing is that debug mode send the process to background:

[root@gridservices puppet]# /usr/sbin/puppetmasterd
--manifest=/etc/puppet/manifests/site.pp
--logdest=/var/log/puppet/puppetmaster.log  --debug
Could not load confine test ''operatingsystem'': No such file to
load -- puppet/provider/confine/operatingsystem
Could not load confine test ''operatingsystem'': No such file to
load -- puppet/provider/confine/operatingsystem
Could not load confine test ''operatingsystem'': No such file to
load -- puppet/provider/confine/operatingsystem
[root@gridservices puppet]# ps -ef|grep puppet
puppet   27541     1  0 16:54 ?        00:00:00 /usr/bin/ruby
/usr/sbin/puppetmasterd --manifest=/etc/puppet/manifests/site.pp
--logdest=/var/log/puppet/puppetmaster.log --debug


On the client side, the problem is more importan:
#  puppetd   --server gridservices.pic.es  --waitforcert 60 --test --report 
Could not load confine test ''operatingsystem'': No such file to
load -- puppet/provider/confine/operatingsystem
err: Could not retrieve catalog: Certificates were not trusted: block type is
not 01
warning: Not using cache on failed catalog

Again, I could discard the warning, but what''s the meaning of the
error?
And, how may I see the debug messages if the process goes to background?

Thanks in advance,
Arnau

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

The error is telling you that the certificate isn''t trusted.

You just rebuilt the server, but the client is the same?

You should blow away the certs on the client and get a new certificate
signed by the new server.


On Wed, Nov 12, 2008 at 8:55 AM, Arnau Bria <arnaubria@pic.es> wrote:
>
> Hi all,
>
> last week I was able to configure client-server with a CentOs 5.2 and
> Scientifi Linux 4 (RH ent 4).
>
> Now, I must change my server to SL4, and my repos give me version 0.22,
> and I found some problems with rrdtool, again.
>
> So, I''d like to install version 0.24 using epel repos:
> http://download.fedora.redhat.com/pub/epel/4/x86_64/
>
> I can do it and seems to work on server but it gives me a warning:
> Could not load confine test ''operatingsystem'': No such
file to load --
> puppet/provider/confine/operatingsystem
>
> (I''ve seen the old bug and I don''t care about it).
>
> One important thing is that debug mode send the process to background:
>
> [root@gridservices puppet]# /usr/sbin/puppetmasterd
> --manifest=/etc/puppet/manifests/site.pp
> --logdest=/var/log/puppet/puppetmaster.log  --debug
> Could not load confine test ''operatingsystem'': No such
file to load --
> puppet/provider/confine/operatingsystem
> Could not load confine test ''operatingsystem'': No such
file to load --
> puppet/provider/confine/operatingsystem
> Could not load confine test ''operatingsystem'': No such
file to load --
> puppet/provider/confine/operatingsystem
> [root@gridservices puppet]# ps -ef|grep puppet
> puppet   27541     1  0 16:54 ?        00:00:00 /usr/bin/ruby
> /usr/sbin/puppetmasterd --manifest=/etc/puppet/manifests/site.pp
> --logdest=/var/log/puppet/puppetmaster.log --debug
>
>
> On the client side, the problem is more importan:
> #  puppetd   --server gridservices.pic.es  --waitforcert 60 --test
> --report
> Could not load confine test ''operatingsystem'': No such
file to load --
> puppet/provider/confine/operatingsystem
> err: Could not retrieve catalog: Certificates were not trusted: block type
> is not 01
> warning: Not using cache on failed catalog
>
> Again, I could discard the warning, but what''s the meaning of the
error?
> And, how may I see the debug messages if the process goes to background?
>
> Thanks in advance,
> Arnau
>
> >
>
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

*Sorry for breaking the treat 
 	 	
Andrew Shafer said:
> The error is telling you that the certificate isn''t trusted.
> You just rebuilt the server, but the client is the same?
no, I rebuilt both... but the ssl dir was the same.
> You should blow away the certs on the client and get a new
> certificate signed by the new server. 
ok, it did it. 

now I have a new problem:

]#  puppetd   --server gridservices.pic.es  --waitforcert 60 --test --report 
--debug
debug: Creating default schedules
debug: Failed to load library ''shadow'' for feature
''libshadow''
Could not load confine test ''operatingsystem'': No such file to
load -- puppet/provider/confine/operatingsystem
debug: Failed to load library ''ldap'' for feature
''ldap''
Could not load confine test ''operatingsystem'': No such file to
load -- puppet/provider/confine/operatingsystem
debug:
/Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/puppet/ssl/certs]:
Autorequiring File[/var/lib/puppet/ssl]
debug:
/Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/puppet/ssl/csr_td234.pic.es.pem]:
Autorequiring File[/var/lib/puppet/ssl]
debug:
/Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/puppet/state]:
Autorequiring File[/var/lib/puppet]
debug:
/Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/puppet/ssl/public_keys]:
Autorequiring File[/var/lib/puppet/ssl]
debug:
/Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/puppet/ssl/private_keys/td234.pic.es.pem]:
Autorequiring File[/var/lib/puppet/ssl/private_keys]
debug:
/Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/puppet/ssl/private_keys]:
Autorequiring File[/var/lib/puppet/ssl]
debug:
/Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/puppet/ssl/public_keys/td234.pic.es.pem]:
Autorequiring File[/var/lib/puppet/ssl/public_keys]
debug:
/Settings[/etc/puppet/puppet.conf]/Settings[ssl]/File[/var/lib/puppet/ssl/private]:
Autorequiring File[/var/lib/puppet/ssl]
debug:
/Settings[/etc/puppet/puppet.conf]/Settings[puppetd]/File[/etc/puppet/puppet.conf]:
Autorequiring File[/etc/puppet]
debug:
/Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/puppet/lib]:
Autorequiring File[/var/lib/puppet]
debug:
/Settings[/etc/puppet/puppet.conf]/Settings[main]/File[/var/lib/puppet/ssl]:
Autorequiring File[/var/lib/puppet]
debug: Finishing transaction 91455568500 with 0 changes
debug: Calling puppetca.getcert
warning: peer certificate won''t be verified in this SSL session.

it hangs here...

and the server:

# puppetca --list
Could not load confine test ''operatingsystem'': No such file to
load -- puppet/provider/confine/operatingsystem
No certificates to sign


so for some reason the server is not receiving the cert

I cannot debug as the process goes background....

Thanks for your reply.

Cheers,
Aranu

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Solved:

]# puppetca --list
Could not load confine test ''operatingsystem'': No such file to
load --
puppet/provider/confine/operatingsystem Could not load confine test
''operatingsystem'': No such file to load --
puppet/provider/confine/operatingsystem Could not load confine test
''operatingsystem'': No such file to load --
puppet/provider/confine/operatingsystem td234.pic.es

I started the master with services...

maybe debug is doing something starnge.

Cheers,
Arnau

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---