Puppet users - Oct 2010 - Failed to retrieve current state of resource: Error 400 on SERVER

Hello there,

I am very new to puppet and tried to copy some files (namely /etc/
puppet/manifests/files/websphermq/status.dat [on master] to /tmp/
status.dat [on puppet]) from master to the puppets. My setup is as
follows:

Puppet 0.25.5

fileserver.conf:
[webspheremq]
path /etc/puppet/manifests/files/webspheremq
allow *

auth.conf (default):
# allow nodes to retrieve their own catalog (ie their configuration)
path ~ ^/catalog/([^/]+)$
method find
allow $1

# allow all nodes to access the certificates services
path /certificate_revocation_list/ca
method find
allow *

# allow all nodes to store their reports
path /report
method save
allow *

# inconditionnally allow access to all files services
# which means in practice that fileserver.conf will
# still be used
path /file
allow *

### Unauthenticated ACL, for clients for which the current master
doesn''t
### have a valid certificate

# allow access to the master CA
path /certificate/ca
auth no
method find
allow *

path /certificate/
auth no
method find
allow *

path /certificate_request
auth no
method find, save
allow *

# this one is not stricly necessary, but it has the merit
# to show the default policy which is deny everything else
path /
auth any

Definition in class:

file { "/tmp/status.dat":
                source => "puppet://<hostname of my puppetmaster>/
webspheremq/status.dat"
        }

I am getting the following error:

Failed to retrieve current state of resource: Error 400 on SERVER: Not
authorized to call find on /file_metadata/webspheremq/status.dat Could
not retrieve file metadata for puppet://<hostname of my puppetmaster>/
webspheremq/status.dat: Error 400 on SERVER: Not authorized to call
find on /file_metadata/webspheremq/status.dat at /etc/puppet/manifests/
classes/webspheremq.pp:20

What is the problem here? What is file_metadata? Is this folder
suppose to exist on my master?

Kind regards
Maciej

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

On Oct 26, 2010, at 3:03 AM, Maciej Skrzetuski wrote:
> Hello there,
> 
> I am very new to puppet and tried to copy some files (namely /etc/
> puppet/manifests/files/websphermq/status.dat [on master] to /tmp/
> status.dat [on puppet]) from master to the puppets. My setup is as
> follows:
> 
> Puppet 0.25.5
> 
> fileserver.conf:
> [webspheremq]
> path /etc/puppet/manifests/files/webspheremq
> allow *
> 
> 
> Definition in class:
> 
> file { "/tmp/status.dat":
>                source => "puppet://<hostname of my
puppetmaster>/
> webspheremq/status.dat"
>        }
> 
> I am getting the following error:
> 
> What is the problem here? What is file_metadata? Is this folder
> suppose to exist on my master?
I don''t know what''s wrong.  That folder doesn''t need
to be created.  It''s possible you have a permissions problem.

Can''t you just use the default path created by modules like this:
*) Remove that section from fileserver.conf.
*) Put the file at /etc/puppet/modules/webspheremq/files/status.dat

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

>> I am getting the following error:
>>
>> What is the problem here? What is file_metadata? Is this folder
>> suppose to exist on my master?
> 
> I don''t know what''s wrong.  That folder doesn''t
need to be created.  It''s possible you have a permissions problem.
Right, good thinking. Make sure to see whether the puppetmaster is
logging anything suspicious.

Regards,
Felix

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

On Oct 26, 2010, at 7:00 AM, Felix Frank wrote:
>>> I am getting the following error:
>>> 
>>> What is the problem here? What is file_metadata? Is this folder
>>> suppose to exist on my master?
>> 
>> I don''t know what''s wrong.  That folder
doesn''t need to be created.  It''s possible you have a
permissions problem.
> 
> Right, good thinking. Make sure to see whether the puppetmaster is
> logging anything suspicious.
Also, to check the permissions, do this on the puppetmaster:
*) "cd /"
*) "su puppet"
*) "cd name_of_containing_folder"
*) "cat filename_with_no_path.ext"

Frankly, my best wild guess it that there (by design) is something strange with
the file permissions (in auth.conf) on the /etc/puppet/manifests folder so that
a node can only pull it''s own config.

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

Well if I do this:

fileserver.conf (default):

# Define a section ''files''
# Adapt the allow/deny settings to your needs. Order
# for allow/deny does not matter, allow always takes precedence
# over deny
# [files]
#  path /var/lib/puppet/files
#  allow *.example.com
#  deny *.evil.example.com
#  allow 192.168.0.0/24

And my file status.dat is in /etc/puppet/modules/webspheremq/files on
the master.
And the class is configured like that:

file { "/tmp/status.dat":
                source => "puppet://master/modules/webspheremq/files/
status.dat"
        }

Then I get s.th. new from my master /var/log/messages:
Oct 26 17:09:53 i11936 puppetmasterd[16999]: (//webspheremq/File[/tmp/
status.dat]) Failed to retrieve current state of resource: Could not
retrieve information from source(s)
puppet://master/modules/webspheremq/files/status.dat
at /etc/puppet/manifests/classes/webspheremq.pp:25

I don''t understand this error. What information, from what source?

Kind regards
Maciej

On 26 Okt., 15:56, Patrick <kc7...@gmail.com>
wrote:
> On Oct 26, 2010, at 3:03 AM, Maciej Skrzetuski wrote:
>
>
>
>
>
>
>
>
>
> > Hello there,
>
> > I am very new to puppet and tried to copy some files (namely /etc/
> > puppet/manifests/files/websphermq/status.dat [on master] to /tmp/
> > status.dat [on puppet]) from master to the puppets. My setup is as
> > follows:
>
> > Puppet 0.25.5
>
> > fileserver.conf:
> > [webspheremq]
> > path /etc/puppet/manifests/files/webspheremq
> > allow *
>
> > Definition in class:
>
> > file { "/tmp/status.dat":
> >                source => "puppet://<hostname of my
puppetmaster>/
> > webspheremq/status.dat"
> >        }
>
> > I am getting the following error:
>
> > What is the problem here? What is file_metadata? Is this folder
> > suppose to exist on my master?
>
> I don''t know what''s wrong.  That folder doesn''t
need to be created.  It''s possible you have a permissions problem.
>
> Can''t you just use the default path created by modules like this:
> *) Remove that section from fileserver.conf.
> *) Put the file at /etc/puppet/modules/webspheremq/files/status.dat
-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

On Oct 26, 2010, at 8:17 AM, Maciej Skrzetuski wrote:
> Well if I do this:
> 
> fileserver.conf (default):
> 
> # Define a section ''files''
> # Adapt the allow/deny settings to your needs. Order
> # for allow/deny does not matter, allow always takes precedence
> # over deny
> # [files]
> #  path /var/lib/puppet/files
> #  allow *.example.com
> #  deny *.evil.example.com
> #  allow 192.168.0.0/24
> 
> And my file status.dat is in /etc/puppet/modules/webspheremq/files on
> the master.
> And the class is configured like that:
> 
> file { "/tmp/status.dat":
>                source =>
"puppet://master/modules/webspheremq/files/
> status.dat"
>        }
> 
> Then I get s.th. new from my master /var/log/messages:
> Oct 26 17:09:53 i11936 puppetmasterd[16999]: (//webspheremq/File[/tmp/
> status.dat]) Failed to retrieve current state of resource: Could not
> retrieve information from source(s)
puppet://master/modules/webspheremq/files/status.dat
> at /etc/puppet/manifests/classes/webspheremq.pp:25
> 
> I don''t understand this error. What information, from what source?
When you use "puppet://" the file is not sent in the manifest. 
It''s saying it can''t get the file using the puppet protocol.

This is happening because I made a typo in my example.  The "files"
part of the path shouldn''t be there.  Also, there is no need to tell
puppet which server to get the file from.

Try ''puppet:///modules/webspheremq/status.dat'' instead.

Note: Using 3 slashes in a row tells the client to get the file from the same
location as the manifest.
> 
> On 26 Okt., 15:56, Patrick <kc7...@gmail.com> wrote:
>> On Oct 26, 2010, at 3:03 AM, Maciej Skrzetuski wrote:
>> 
>> 
>> 
>> 
>> 
>> 
>> 
>> 
>> 
>>> Hello there,
>> 
>>> I am very new to puppet and tried to copy some files (namely /etc/
>>> puppet/manifests/files/websphermq/status.dat [on master] to /tmp/
>>> status.dat [on puppet]) from master to the puppets. My setup is as
>>> follows:
>> 
>>> Puppet 0.25.5
>> 
>>> fileserver.conf:
>>> [webspheremq]
>>> path /etc/puppet/manifests/files/webspheremq
>>> allow *
>> 
>>> Definition in class:
>> 
>>> file { "/tmp/status.dat":
>>>                source => "puppet://<hostname of my
puppetmaster>/
>>> webspheremq/status.dat"
>>>        }
>> 
>>> I am getting the following error:
>> 
>>> What is the problem here? What is file_metadata? Is this folder
>>> suppose to exist on my master?
>> 
>> I don''t know what''s wrong.  That folder
doesn''t need to be created.  It''s possible you have a
permissions problem.
>> 
>> Can''t you just use the default path created by modules like
this:
>> *) Remove that section from fileserver.conf.
>> *) Put the file at /etc/puppet/modules/webspheremq/files/status.dat
> 
> -- 
> You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
> To post to this group, send email to puppet-users@googlegroups.com.
> To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
> For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
> 
-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

Yes, that worked. Thank you very much! ;)

On 26 Okt., 18:33, Patrick <kc7...@gmail.com>
wrote:
> On Oct 26, 2010, at 8:17 AM, Maciej Skrzetuski wrote:
>
>
>
>
>
>
>
>
>
> > Well if I do this:
>
> > fileserver.conf (default):
>
> > # Define a section ''files''
> > # Adapt the allow/deny settings to your needs. Order
> > # for allow/deny does not matter, allow always takes precedence
> > # over deny
> > # [files]
> > #  path /var/lib/puppet/files
> > #  allow *.example.com
> > #  deny *.evil.example.com
> > #  allow 192.168.0.0/24
>
> > And my file status.dat is in /etc/puppet/modules/webspheremq/files on
> > the master.
> > And the class is configured like that:
>
> > file { "/tmp/status.dat":
> >                source =>
"puppet://master/modules/webspheremq/files/
> > status.dat"
> >        }
>
> > Then I get s.th. new from my master /var/log/messages:
> > Oct 26 17:09:53 i11936 puppetmasterd[16999]: (//webspheremq/File[/tmp/
> > status.dat]) Failed to retrieve current state of resource: Could not
> > retrieve information from source(s)
puppet://master/modules/webspheremq/files/status.dat
> > at /etc/puppet/manifests/classes/webspheremq.pp:25
>
> > I don''t understand this error. What information, from what
source?
>
> When you use "puppet://" the file is not sent in the manifest.
 It''s saying it can''t get the file using the puppet protocol.
>
> This is happening because I made a typo in my example.  The
"files" part of the path shouldn''t be there.  Also, there is
no need to tell puppet which server to get the file from.
>
> Try ''puppet:///modules/webspheremq/status.dat'' instead.
>
> Note: Using 3 slashes in a row tells the client to get the file from the
same location as the manifest.
>
>
>
>
>
>
>
>
>
> > On 26 Okt., 15:56, Patrick <kc7...@gmail.com> wrote:
> >> On Oct 26, 2010, at 3:03 AM, Maciej Skrzetuski wrote:
>
> >>> Hello there,
>
> >>> I am very new to puppet and tried to copy some files (namely
/etc/
> >>> puppet/manifests/files/websphermq/status.dat [on master] to
/tmp/
> >>> status.dat [on puppet]) from master to the puppets. My setup
is as
> >>> follows:
>
> >>> Puppet 0.25.5
>
> >>> fileserver.conf:
> >>> [webspheremq]
> >>> path /etc/puppet/manifests/files/webspheremq
> >>> allow *
>
> >>> Definition in class:
>
> >>> file { "/tmp/status.dat":
> >>>                source => "puppet://<hostname of my
puppetmaster>/
> >>> webspheremq/status.dat"
> >>>        }
>
> >>> I am getting the following error:
>
> >>> What is the problem here? What is file_metadata? Is this
folder
> >>> suppose to exist on my master?
>
> >> I don''t know what''s wrong.  That folder
doesn''t need to be created.  It''s possible you have a
permissions problem.
>
> >> Can''t you just use the default path created by modules
like this:
> >> *) Remove that section from fileserver.conf.
> >> *) Put the file at
/etc/puppet/modules/webspheremq/files/status.dat
>
> > --
> > You received this message because you are subscribed to the Google
Groups "Puppet Users" group.
> > To post to this group, send email to puppet-users@googlegroups.com.
> > To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
> > For more options, visit this group
athttp://groups.google.com/group/puppet-users?hl=en.
-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

Hello everyone,

I updated puppet to 2.6.2 and with the same configuration I am
getting:

err: /Stage[main]/Webspheremq/File[/tmp/mq_license/license/
status.dat]: Could not evaluate: Could not retrieve information from
source(s) puppet:///modules/webspheremq/status.dat at /etc/puppet/
manifests/classes/webspheremq.pp:58

My status.dat is placed in /etc/puppet/modules/webspheremq/files. This
is correct, isn''t it? Do I have to do s.th. special in the version
2.6.2?

Kind regards
Maciej

On 26 Okt., 20:41, Maciej Skrzetuski <m.skrzetu...@gmail.com>
wrote:
> Yes, that worked. Thank you very much! ;)
>
> On 26 Okt., 18:33, Patrick <kc7...@gmail.com> wrote:
>
>
>
>
>
>
>
> > On Oct 26, 2010, at 8:17 AM, MaciejSkrzetuskiwrote:
>
> > > Well if I do this:
>
> > > fileserver.conf (default):
>
> > > # Define a section ''files''
> > > # Adapt the allow/deny settings to your needs. Order
> > > # for allow/deny does not matter, allow always takes precedence
> > > # over deny
> > > # [files]
> > > #  path /var/lib/puppet/files
> > > #  allow *.example.com
> > > #  deny *.evil.example.com
> > > #  allow 192.168.0.0/24
>
> > > And my file status.dat is in
/etc/puppet/modules/webspheremq/files on
> > > the master.
> > > And the class is configured like that:
>
> > > file { "/tmp/status.dat":
> > >                source =>
"puppet://master/modules/webspheremq/files/
> > > status.dat"
> > >        }
>
> > > Then I get s.th. new from my master /var/log/messages:
> > > Oct 26 17:09:53 i11936 puppetmasterd[16999]:
(//webspheremq/File[/tmp/
> > > status.dat]) Failed to retrieve current state of resource: Could
not
> > > retrieve information from source(s)
puppet://master/modules/webspheremq/files/status.dat
> > > at /etc/puppet/manifests/classes/webspheremq.pp:25
>
> > > I don''t understand this error. What information, from
what source?
>
> > When you use "puppet://" the file is not sent in the
manifest.  It''s saying it can''t get the file using the puppet
protocol.
>
> > This is happening because I made a typo in my example.  The
"files" part of the path shouldn''t be there.  Also, there is
no need to tell puppet which server to get the file from.
>
> > Try ''puppet:///modules/webspheremq/status.dat''
instead.
>
> > Note: Using 3 slashes in a row tells the client to get the file from
the same location as the manifest.
>
> > > On 26 Okt., 15:56, Patrick <kc7...@gmail.com> wrote:
> > >> On Oct 26, 2010, at 3:03 AM, MaciejSkrzetuskiwrote:
>
> > >>> Hello there,
>
> > >>> I am very new to puppet and tried to copy some files
(namely /etc/
> > >>> puppet/manifests/files/websphermq/status.dat [on master]
to /tmp/
> > >>> status.dat [on puppet]) from master to the puppets. My
setup is as
> > >>> follows:
>
> > >>> Puppet 0.25.5
>
> > >>> fileserver.conf:
> > >>> [webspheremq]
> > >>> path /etc/puppet/manifests/files/webspheremq
> > >>> allow *
>
> > >>> Definition in class:
>
> > >>> file { "/tmp/status.dat":
> > >>>                source => "puppet://<hostname
of my puppetmaster>/
> > >>> webspheremq/status.dat"
> > >>>        }
>
> > >>> I am getting the following error:
>
> > >>> What is the problem here? What is file_metadata? Is this
folder
> > >>> suppose to exist on my master?
>
> > >> I don''t know what''s wrong.  That folder
doesn''t need to be created.  It''s possible you have a
permissions problem.
>
> > >> Can''t you just use the default path created by
modules like this:
> > >> *) Remove that section from fileserver.conf.
> > >> *) Put the file at
/etc/puppet/modules/webspheremq/files/status.dat
>
> > > --
> > > You received this message because you are subscribed to the
Google Groups "Puppet Users" group.
> > > To post to this group, send email to
puppet-users@googlegroups.com.
> > > To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
> > > For more options, visit this group
athttp://groups.google.com/group/puppet-users?hl=en.
-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

On Nov 5, 2010, at 5:52 AM, Maciej Skrzetuski wrote:
> Hello everyone,
> 
> I updated puppet to 2.6.2 and with the same configuration I am
> getting:
> 
> err: /Stage[main]/Webspheremq/File[/tmp/mq_license/license/
> status.dat]: Could not evaluate: Could not retrieve information from
> source(s) puppet:///modules/webspheremq/status.dat at /etc/puppet/
> manifests/classes/webspheremq.pp:58
> 
> My status.dat is placed in /etc/puppet/modules/webspheremq/files. This
> is correct, isn''t it? Do I have to do s.th. special in the version
> 2.6.2?
Try this:
*) Become root
*) su - puppet
*) cd /etc/puppet/modules/webspheremq/files
*) vi status.dat

Does any of this fail with a permission error?

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.