Puppet users - Oct 2010 - FreeBSD puppetd CSRs being ignored by puppetmaster

Hi,

I''m trying to deploy puppetd 0.25.4 (from ports) on two servers
running FreeBSD 8.0-RELEASE and  8.1-RELEASE. The puppetmaster 0.24.5
is running on Debian Lenny. Tcpdump on puppetmaster shows tons of
packets coming in and going out when puppetd is launched.

I''ve used this command for debugging this issue on the client:

$ puppetd --waitforcert 60 --server puppet.openvpn.org --test --debug

And on the server:

$ puppetmasterd --masterport=8140 --no-daemonize --debug

When puppetd connects, puppetmaster does not output anything to the
console, regardless of the connection being established. If I launch
puppetd with

$ /usr/local/etc/rc.d puppetd onestart

both clients output this to /var/log/messages:

"Could not request certificate: undefined method `closed?'' for
nil:NilClass"

Any clues why puppetmaster seems to be ignoring these FreeBSD clients
completely? All other clients, mostly Debian 5 -based, work perfectly.

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

Hi,

On 10/21/2010 12:01 PM, sasepp wrote:
> Hi,
> 
> I''m trying to deploy puppetd 0.25.4 (from ports) on two servers
> running FreeBSD 8.0-RELEASE and  8.1-RELEASE. The puppetmaster 0.24.5
> is running on Debian Lenny. Tcpdump on puppetmaster shows tons of
> packets coming in and going out when puppetd is launched.
> 
> I''ve used this command for debugging this issue on the client:
> 
> $ puppetd --waitforcert 60 --server puppet.openvpn.org --test --debug
> 
> And on the server:
> 
> $ puppetmasterd --masterport=8140 --no-daemonize --debug
> 
> When puppetd connects, puppetmaster does not output anything to the
> console, regardless of the connection being established. If I launch
> puppetd with
> 
> $ /usr/local/etc/rc.d puppetd onestart
> 
> both clients output this to /var/log/messages:
> 
> "Could not request certificate: undefined method `closed?''
for
> nil:NilClass"
> 
> Any clues why puppetmaster seems to be ignoring these FreeBSD clients
> completely? All other clients, mostly Debian 5 -based, work perfectly.
> 
I''m not certain about your specific problem.

But clients being newer than the master is not a good thing and should
be avoided at all costs. Seeing as the debian stable packages are rather
ancient by now (lots of bugs fixed since), you may want to look for a
way to upgrade those (i.e., use backport or unstable packages, not use
packages at all etc.).

HTH,
Felix

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

> But clients being newer than the master is not a good thing and should
> be avoided at all costs. Seeing as the debian stable packages are rather
> ancient by now (lots of bugs fixed since), you may want to look for a
> way to upgrade those (i.e., use backport or unstable packages, not use
> packages at all etc.).
>
> HTH,
> Felix
Hi Felix,

Upgrading the puppetmaster to 0.25.4 from Lenny backports did the
trick. Thanks a lot for the tip!

Samuli

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

On Oct 21, 2010, at 3:01 AM, sasepp wrote:
> Hi,
> 
> I''m trying to deploy puppetd 0.25.4 (from ports) on two servers
> running FreeBSD 8.0-RELEASE and  8.1-RELEASE. The puppetmaster 0.24.5
> is running on Debian Lenny. Tcpdump on puppetmaster shows tons of
> packets coming in and going out when puppetd is launched.
> 
> I''ve used this command for debugging this issue on the client:
> 
> $ puppetd --waitforcert 60 --server puppet.openvpn.org --test --debug
> 
> And on the server:
> 
> $ puppetmasterd --masterport=8140 --no-daemonize --debug
> 
> When puppetd connects, puppetmaster does not output anything to the
> console, regardless of the connection being established. If I launch
> puppetd with
> 
> $ /usr/local/etc/rc.d puppetd onestart
> 
> both clients output this to /var/log/messages:
> 
> "Could not request certificate: undefined method `closed?''
for
> nil:NilClass"
> 
> Any clues why puppetmaster seems to be ignoring these FreeBSD clients
> completely? All other clients, mostly Debian 5 -based, work perfectly.
For future reference:
The "undefined method `closed?'' for nil:NilClass" error is a
known and very confusing bug in 0.25.x, that is fixed in 0.25.5.  It replaces
most error messages with this "nil:NilClass" error.  Upgrade to fix
it, if you want to see the real error.

If you can''t upgrade, you can find the fix at
http://projects.puppetlabs.com/projects/puppet/repository/revisions/ae0b0bf23e418e8c6665e9dc135148b78bdbd913
and manually use it.

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

On 10/21/2010 03:01 AM, sasepp wrote:
> Hi,
>
> I''m trying to deploy puppetd 0.25.4 (from ports) on two servers
> running FreeBSD 8.0-RELEASE and  8.1-RELEASE.
Are you sure you installed this from ports? Ports currently has version 2.6.2.

-- 
Russell A. Jackson <raj@csub.edu>
Network Analyst
California State University, Bakersfield

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.