sanjiv.singh
2010-Nov-11 15:04 UTC
[Puppet Users] puppetrun + notice: Denying unauthenticated .... access to puppetrunner.run
hi all,
i am in trouble with running puppetrun...
i m able to run puppetd ...
which successfully get configuration from master and made changes on
client side....
and following are senario i m using to run puppetrun....
there is no issue on port
i had opened ports .....
8140 : on master
8139 : on client
and added following file /etc/puppet/namespaceauth.conf on
client......
[puppetrunner]
allow *
on master :
==============$ puppetrun --all --debug
Triggering dmb-1289455541.puppet.com
warning: peer certificate won''t be verified in this SSL session
Host dmb-1289455541.puppet.com failed: HTTP-Error: 500 Internal Server
Error
dmb-1289455541.puppet.com finished with exit code 2
on client :
==============$ puppetd --verbose --no-daemonize --listen --debug
..
.
.
notice: Finished catalog run in 19.93 seconds
debug: Using cached certificate for ca
debug: Using cached certificate for dmb-1289455541.puppet.com
debug: Using cached certificate for ca
debug: Using cached certificate_revocation_list for ca
notice: Denying unauthenticated client 184-106-208-159.static.cloud-
ips.com(184.106.208.159) access to puppetrunner.run
a lot googling is done and gone through various blogs and
documentation......,
i had logined as root on both side (master and client)
question :
1) Can any budy tell me what is exactly d problem ?
2) or Is there any extra configuration required with puppetrun?
3) How is puppetmaster is authentication on puppetclient ?
U r all pleased to solve this problem.
any help wll be appreciated .....
Thanks & Regards :
Sanjiv Singh (iLabs )
Impetus Infotech (India) .
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
Ohad Levy
2010-Nov-11 15:23 UTC
Re: [Puppet Users] puppetrun + notice: Denying unauthenticated .... access to puppetrunner.run
if you are using puppet 2.6.x you need to adjust your auth.conf too see http://theforeman.org/projects/foreman/wiki/puppetrun for an example Ohad On Thu, Nov 11, 2010 at 5:04 PM, sanjiv.singh <sanjiv.singh@impetus.co.in>wrote:> hi all, > i am in trouble with running puppetrun... > > i m able to run puppetd ... > which successfully get configuration from master and made changes on > client side.... > > and following are senario i m using to run puppetrun.... > > there is no issue on port > i had opened ports ..... > 8140 : on master > 8139 : on client > > and added following file /etc/puppet/namespaceauth.conf on > client...... > > [puppetrunner] > allow * > > on master : > ==============> $ puppetrun --all --debug > > Triggering dmb-1289455541.puppet.com > warning: peer certificate won''t be verified in this SSL session > Host dmb-1289455541.puppet.com failed: HTTP-Error: 500 Internal Server > Error > dmb-1289455541.puppet.com finished with exit code 2 > > on client : > ==============> $ puppetd --verbose --no-daemonize --listen --debug > .. > . > . > notice: Finished catalog run in 19.93 seconds > debug: Using cached certificate for ca > debug: Using cached certificate for dmb-1289455541.puppet.com > debug: Using cached certificate for ca > debug: Using cached certificate_revocation_list for ca > notice: Denying unauthenticated client 184-106-208-159.static.cloud- > ips.com(184.106.208.159) access to puppetrunner.run > > > a lot googling is done and gone through various blogs and > documentation......, > i had logined as root on both side (master and client) > > question : > > 1) Can any budy tell me what is exactly d problem ? > 2) or Is there any extra configuration required with puppetrun? > 3) How is puppetmaster is authentication on puppetclient ? > > > U r all pleased to solve this problem. > any help wll be appreciated ..... > > Thanks & Regards : > Sanjiv Singh (iLabs ) > Impetus Infotech (India) . > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to > puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com> > . > For more options, visit this group at > http://groups.google.com/group/puppet-users?hl=en. > >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
sanjiv.singh
2010-Nov-12 07:17 UTC
[Puppet Users] Re: puppetrun + notice: Denying unauthenticated .... access to puppetrunner.run
hi Ohad, thanks for reply.... i m using puppet version 0.25.X on both side (client & master)... and edited and added following file /etc/puppet/auth.conf on client ... path /run method save allow * , but still problem is not resolved..... On Nov 11, 8:23 pm, Ohad Levy <ohadl...@gmail.com> wrote:> if you are using puppet 2.6.x you need to adjust your auth.conf too > seehttp://theforeman.org/projects/foreman/wiki/puppetrunfor an example > > Ohad > > On Thu, Nov 11, 2010 at 5:04 PM, sanjiv.singh <sanjiv.si...@impetus.co.in>wrote: > > > > > hi all, > > i am in trouble with running puppetrun... > > > i m able to run puppetd ... > > which successfully get configuration from master and made changes on > > client side.... > > > and following are senario i m using to run puppetrun.... > > > there is no issue on port > > i had opened ports ..... > > 8140 : on master > > 8139 : on client > > > and added following file /etc/puppet/namespaceauth.conf on > > client...... > > > [puppetrunner] > > allow * > > > on master : > > ==============> > $ puppetrun --all --debug > > > Triggering dmb-1289455541.puppet.com > > warning: peer certificate won''t be verified in this SSL session > > Host dmb-1289455541.puppet.com failed: HTTP-Error: 500 Internal Server > > Error > > dmb-1289455541.puppet.com finished with exit code 2 > > > on client : > > ==============> > $ puppetd --verbose --no-daemonize --listen --debug > > .. > > . > > . > > notice: Finished catalog run in 19.93 seconds > > debug: Using cached certificate for ca > > debug: Using cached certificate for dmb-1289455541.puppet.com > > debug: Using cached certificate for ca > > debug: Using cached certificate_revocation_list for ca > > notice: Denying unauthenticated client 184-106-208-159.static.cloud- > > ips.com(184.106.208.159) access to puppetrunner.run > > > a lot googling is done and gone through various blogs and > > documentation......, > > i had logined as root on both side (master and client) > > > question : > > > 1) Can any budy tell me what is exactly d problem ? > > 2) or Is there any extra configuration required with puppetrun? > > 3) How is puppetmaster is authentication on puppetclient ? > > > U r all pleased to solve this problem. > > any help wll be appreciated ..... > > > Thanks & Regards : > > Sanjiv Singh (iLabs ) > > Impetus Infotech (India) . > > > -- > > You received this message because you are subscribed to the Google Groups > > "Puppet Users" group. > > To post to this group, send email to puppet-users@googlegroups.com. > > To unsubscribe from this group, send email to > > puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com> > > . > > For more options, visit this group at > >http://groups.google.com/group/puppet-users?hl=en.- Hide quoted text - > > - Show quoted text --- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
sanjiv.singh
2010-Nov-16 11:20 UTC
[Puppet Users] Re: puppetrun + notice: Denying unauthenticated .... access to puppetrunner.run
hi Ohad, a lot googling is done and gone through various blogs and documentation.. and made what ever changes U suggested . but still problem not resolved. plz help me to resolve this problem. On Nov 12, 12:17 pm, "sanjiv.singh" <sanjiv.si...@impetus.co.in> wrote:> hi Ohad, > thanks for reply.... > i m using puppet version 0.25.X on both side (client & master)... > > and edited and added following file /etc/puppet/auth.conf on > client ... > > path /run > method save > allow * > > , but still problem is not resolved..... > > On Nov 11, 8:23 pm, Ohad Levy <ohadl...@gmail.com> wrote: > > > if you are using puppet 2.6.x you need to adjust your auth.conf too > > seehttp://theforeman.org/projects/foreman/wiki/puppetrunforan example > > > Ohad > > > On Thu, Nov 11, 2010 at 5:04 PM, sanjiv.singh <sanjiv.si...@impetus.co.in>wrote: > > > > hi all, > > > i am in trouble with running puppetrun... > > > > i m able to run puppetd ... > > > which successfully get configuration from master and made changes on > > > client side.... > > > > and following are senario i m using to run puppetrun.... > > > > there is no issue on port > > > i had opened ports ..... > > > 8140 : on master > > > 8139 : on client > > > > and added following file /etc/puppet/namespaceauth.conf on > > > client...... > > > > [puppetrunner] > > > allow * > > > > on master : > > > ==============> > > $ puppetrun --all --debug > > > > Triggering dmb-1289455541.puppet.com > > > warning: peer certificate won''t be verified in this SSL session > > > Host dmb-1289455541.puppet.com failed: HTTP-Error: 500 Internal Server > > > Error > > > dmb-1289455541.puppet.com finished with exit code 2 > > > > on client : > > > ==============> > > $ puppetd --verbose --no-daemonize --listen --debug > > > .. > > > . > > > . > > > notice: Finished catalog run in 19.93 seconds > > > debug: Using cached certificate for ca > > > debug: Using cached certificate for dmb-1289455541.puppet.com > > > debug: Using cached certificate for ca > > > debug: Using cached certificate_revocation_list for ca > > > notice: Denying unauthenticated client 184-106-208-159.static.cloud- > > > ips.com(184.106.208.159) access to puppetrunner.run > > > > a lot googling is done and gone through various blogs and > > > documentation......, > > > i had logined as root on both side (master and client) > > > > question : > > > > 1) Can any budy tell me what is exactly d problem ? > > > 2) or Is there any extra configuration required with puppetrun? > > > 3) How is puppetmaster is authentication on puppetclient ? > > > > U r all pleased to solve this problem. > > > any help wll be appreciated ..... > > > > Thanks & Regards : > > > Sanjiv Singh (iLabs ) > > > Impetus Infotech (India) . > > > > -- > > > You received this message because you are subscribed to the Google Groups > > > "Puppet Users" group. > > > To post to this group, send email to puppet-users@googlegroups.com. > > > To unsubscribe from this group, send email to > > > puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com> > > > . > > > For more options, visit this group at > > >http://groups.google.com/group/puppet-users?hl=en.-Hide quoted text - > > > - Show quoted text - > >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Ohad Levy
2010-Nov-16 12:15 UTC
Re: [Puppet Users] Re: puppetrun + notice: Denying unauthenticated .... access to puppetrunner.run
Can you paste your namespace config file? try to make sure that your allow line matches to another host fqdn (the one you want to push from). Ohad On Tue, Nov 16, 2010 at 1:20 PM, sanjiv.singh <sanjiv.singh@impetus.co.in>wrote:> hi Ohad, > a lot googling is done and gone through various blogs and > documentation.. > > and made what ever changes U suggested . > but still problem not resolved. > > plz help me to resolve this problem. > > > On Nov 12, 12:17 pm, "sanjiv.singh" <sanjiv.si...@impetus.co.in> > wrote: > > hi Ohad, > > thanks for reply.... > > i m using puppet version 0.25.X on both side (client & master)... > > > > and edited and added following file /etc/puppet/auth.conf on > > client ... > > > > path /run > > method save > > allow * > > > > , but still problem is not resolved..... > > > > On Nov 11, 8:23 pm, Ohad Levy <ohadl...@gmail.com> wrote: > > > > > if you are using puppet 2.6.x you need to adjust your auth.conf too > > > seehttp://theforeman.org/projects/foreman/wiki/puppetrunforan example > > > > > Ohad > > > > > On Thu, Nov 11, 2010 at 5:04 PM, sanjiv.singh < > sanjiv.si...@impetus.co.in>wrote: > > > > > > hi all, > > > > i am in trouble with running puppetrun... > > > > > > i m able to run puppetd ... > > > > which successfully get configuration from master and made changes on > > > > client side.... > > > > > > and following are senario i m using to run puppetrun.... > > > > > > there is no issue on port > > > > i had opened ports ..... > > > > 8140 : on master > > > > 8139 : on client > > > > > > and added following file /etc/puppet/namespaceauth.conf on > > > > client...... > > > > > > [puppetrunner] > > > > allow * > > > > > > on master : > > > > ==============> > > > $ puppetrun --all --debug > > > > > > Triggering dmb-1289455541.puppet.com > > > > warning: peer certificate won''t be verified in this SSL session > > > > Host dmb-1289455541.puppet.com failed: HTTP-Error: 500 Internal > Server > > > > Error > > > > dmb-1289455541.puppet.com finished with exit code 2 > > > > > > on client : > > > > ==============> > > > $ puppetd --verbose --no-daemonize --listen --debug > > > > .. > > > > . > > > > . > > > > notice: Finished catalog run in 19.93 seconds > > > > debug: Using cached certificate for ca > > > > debug: Using cached certificate for dmb-1289455541.puppet.com > > > > debug: Using cached certificate for ca > > > > debug: Using cached certificate_revocation_list for ca > > > > notice: Denying unauthenticated client 184-106-208-159.static.cloud- > > > > ips.com(184.106.208.159) access to puppetrunner.run > > > > > > a lot googling is done and gone through various blogs and > > > > documentation......, > > > > i had logined as root on both side (master and client) > > > > > > question : > > > > > > 1) Can any budy tell me what is exactly d problem ? > > > > 2) or Is there any extra configuration required with puppetrun? > > > > 3) How is puppetmaster is authentication on puppetclient ? > > > > > > U r all pleased to solve this problem. > > > > any help wll be appreciated ..... > > > > > > Thanks & Regards : > > > > Sanjiv Singh (iLabs ) > > > > Impetus Infotech (India) . > > > > > > -- > > > > You received this message because you are subscribed to the Google > Groups > > > > "Puppet Users" group. > > > > To post to this group, send email to puppet-users@googlegroups.com. > > > > To unsubscribe from this group, send email to > > > > puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com> > <puppet-users%2Bunsubscribe@googlegroups.com> > > > > . > > > > For more options, visit this group at > > > >http://groups.google.com/group/puppet-users?hl=en.-Hide quoted text - > > > > > - Show quoted text - > > > > > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to > puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com> > . > For more options, visit this group at > http://groups.google.com/group/puppet-users?hl=en. > >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
sanjiv.singh
2010-Nov-16 12:31 UTC
[Puppet Users] Re: puppetrun + notice: Denying unauthenticated .... access to puppetrunner.run
hi Ohad ,
here are my namespaceauth.conf configurarion ....
on master :
===============/etc/puppet/namespaceauth.conf
[fileserver]
allow *
[puppetmaster]
allow *
[puppetrunner]
allow *
on client :
===================
/etc/puppet/namespaceauth.conf
[puppetrunner]
allow *
On Nov 16, 5:15 pm, Ohad Levy <ohadl...@gmail.com>
wrote:> Can you paste your namespace config file?
>
> try to make sure that your allow line matches to another host fqdn (the one
> you want to push from).
>
> Ohad
>
> On Tue, Nov 16, 2010 at 1:20 PM, sanjiv.singh
<sanjiv.si...@impetus.co.in>wrote:
>
> > hi Ohad,
> > a lot googling is done and gone through various blogs and
> > documentation..
>
> > and made what ever changes U suggested .
> > but still problem not resolved.
>
> > plz help me to resolve this problem.
>
> > On Nov 12, 12:17 pm, "sanjiv.singh"
<sanjiv.si...@impetus.co.in>
> > wrote:
> > > hi Ohad,
> > > thanks for reply....
> > > i m using puppet version 0.25.X on both side (client &
master)...
>
> > > and edited and added following file /etc/puppet/auth.conf on
> > > client ...
>
> > > path /run
> > > method save
> > > allow *
>
> > > , but still problem is not resolved.....
>
> > > On Nov 11, 8:23 pm, Ohad Levy <ohadl...@gmail.com> wrote:
>
> > > > if you are using puppet 2.6.x you need to adjust your
auth.conf too
> > > >
seehttp://theforeman.org/projects/foreman/wiki/puppetrunforanexample
>
> > > > Ohad
>
> > > > On Thu, Nov 11, 2010 at 5:04 PM, sanjiv.singh <
> > sanjiv.si...@impetus.co.in>wrote:
>
> > > > > hi all,
> > > > > i am in trouble with running puppetrun...
>
> > > > > i m able to run puppetd ...
> > > > > which successfully get configuration from master and
made changes on
> > > > > client side....
>
> > > > > and following are senario i m using to run
puppetrun....
>
> > > > > there is no issue on port
> > > > > i had opened ports .....
> > > > > 8140 : on master
> > > > > 8139 : on client
>
> > > > > and added following file /etc/puppet/namespaceauth.conf
on
> > > > > client......
>
> > > > > [puppetrunner]
> > > > > allow *
>
> > > > > on master :
> > > > > ==============> > > > > $ puppetrun
--all --debug
>
> > > > > Triggering dmb-1289455541.puppet.com
> > > > > warning: peer certificate won''t be verified in
this SSL session
> > > > > Host dmb-1289455541.puppet.com failed: HTTP-Error: 500
Internal
> > Server
> > > > > Error
> > > > > dmb-1289455541.puppet.com finished with exit code 2
>
> > > > > on client :
> > > > > ==============> > > > > $ puppetd
--verbose --no-daemonize --listen --debug
> > > > > ..
> > > > > .
> > > > > .
> > > > > notice: Finished catalog run in 19.93 seconds
> > > > > debug: Using cached certificate for ca
> > > > > debug: Using cached certificate for
dmb-1289455541.puppet.com
> > > > > debug: Using cached certificate for ca
> > > > > debug: Using cached certificate_revocation_list for ca
> > > > > notice: Denying unauthenticated client
184-106-208-159.static.cloud-
> > > > > ips.com(184.106.208.159) access to puppetrunner.run
>
> > > > > a lot googling is done and gone through various blogs
and
> > > > > documentation......,
> > > > > i had logined as root on both side (master and client)
>
> > > > > question :
>
> > > > > 1) Can any budy tell me what is exactly d problem ?
> > > > > 2) or Is there any extra configuration required with
puppetrun?
> > > > > 3) How is puppetmaster is authentication on
puppetclient ?
>
> > > > > U r all pleased to solve this problem.
> > > > > any help wll be appreciated .....
>
> > > > > Thanks & Regards :
> > > > > Sanjiv Singh (iLabs )
> > > > > Impetus Infotech (India) .
>
> > > > > --
> > > > > You received this message because you are subscribed to
the Google
> > Groups
> > > > > "Puppet Users" group.
> > > > > To post to this group, send email to
puppet-users@googlegroups.com.
> > > > > To unsubscribe from this group, send email to
> > > > >
puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com>
> > <puppet-users%2Bunsubscribe@googlegroups.com>
> > > > > .
> > > > > For more options, visit this group at
> > > >
>http://groups.google.com/group/puppet-users?hl=en.-Hidequoted text -
>
> > > > - Show quoted text -
>
> > --
> > You received this message because you are subscribed to the Google
Groups
> > "Puppet Users" group.
> > To post to this group, send email to puppet-users@googlegroups.com.
> > To unsubscribe from this group, send email to
> >
puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com>
> > .
> > For more options, visit this group at
> >http://groups.google.com/group/puppet-users?hl=en.
>
>
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
Ohad Levy
2010-Nov-16 13:07 UTC
Re: [Puppet Users] Re: puppetrun + notice: Denying unauthenticated .... access to puppetrunner.run
On Tue, Nov 16, 2010 at 2:31 PM, sanjiv.singh <sanjiv.singh@impetus.co.in>wrote:> hi Ohad , > > here are my namespaceauth.conf configurarion .... > > on master : > ===============> /etc/puppet/namespaceauth.conf > > [fileserver] > allow * > [puppetmaster] > allow * > [puppetrunner] > allow * > > on client : > ===================> > /etc/puppet/namespaceauth.conf > > [puppetrunner] > allow * > > try changing this to the fqdn of your master (or wherever you run puppetrunfrom). Ohad> > > On Nov 16, 5:15 pm, Ohad Levy <ohadl...@gmail.com> wrote: > > Can you paste your namespace config file? > > > > try to make sure that your allow line matches to another host fqdn (the > one > > you want to push from). > > > > Ohad > > > > On Tue, Nov 16, 2010 at 1:20 PM, sanjiv.singh < > sanjiv.si...@impetus.co.in>wrote: > > > > > hi Ohad, > > > a lot googling is done and gone through various blogs and > > > documentation.. > > > > > and made what ever changes U suggested . > > > but still problem not resolved. > > > > > plz help me to resolve this problem. > > > > > On Nov 12, 12:17 pm, "sanjiv.singh" <sanjiv.si...@impetus.co.in> > > > wrote: > > > > hi Ohad, > > > > thanks for reply.... > > > > i m using puppet version 0.25.X on both side (client & master)... > > > > > > and edited and added following file /etc/puppet/auth.conf on > > > > client ... > > > > > > path /run > > > > method save > > > > allow * > > > > > > , but still problem is not resolved..... > > > > > > On Nov 11, 8:23 pm, Ohad Levy <ohadl...@gmail.com> wrote: > > > > > > > if you are using puppet 2.6.x you need to adjust your auth.conf too > > > > > seehttp:// > theforeman.org/projects/foreman/wiki/puppetrunforanexample > > > > > > > Ohad > > > > > > > On Thu, Nov 11, 2010 at 5:04 PM, sanjiv.singh < > > > sanjiv.si...@impetus.co.in>wrote: > > > > > > > > hi all, > > > > > > i am in trouble with running puppetrun... > > > > > > > > i m able to run puppetd ... > > > > > > which successfully get configuration from master and made changes > on > > > > > > client side.... > > > > > > > > and following are senario i m using to run puppetrun.... > > > > > > > > there is no issue on port > > > > > > i had opened ports ..... > > > > > > 8140 : on master > > > > > > 8139 : on client > > > > > > > > and added following file /etc/puppet/namespaceauth.conf on > > > > > > client...... > > > > > > > > [puppetrunner] > > > > > > allow * > > > > > > > > on master : > > > > > > ==============> > > > > > $ puppetrun --all --debug > > > > > > > > Triggering dmb-1289455541.puppet.com > > > > > > warning: peer certificate won''t be verified in this SSL session > > > > > > Host dmb-1289455541.puppet.com failed: HTTP-Error: 500 Internal > > > Server > > > > > > Error > > > > > > dmb-1289455541.puppet.com finished with exit code 2 > > > > > > > > on client : > > > > > > ==============> > > > > > $ puppetd --verbose --no-daemonize --listen --debug > > > > > > .. > > > > > > . > > > > > > . > > > > > > notice: Finished catalog run in 19.93 seconds > > > > > > debug: Using cached certificate for ca > > > > > > debug: Using cached certificate for dmb-1289455541.puppet.com > > > > > > debug: Using cached certificate for ca > > > > > > debug: Using cached certificate_revocation_list for ca > > > > > > notice: Denying unauthenticated client > 184-106-208-159.static.cloud- > > > > > > ips.com(184.106.208.159) access to puppetrunner.run > > > > > > > > a lot googling is done and gone through various blogs and > > > > > > documentation......, > > > > > > i had logined as root on both side (master and client) > > > > > > > > question : > > > > > > > > 1) Can any budy tell me what is exactly d problem ? > > > > > > 2) or Is there any extra configuration required with puppetrun? > > > > > > 3) How is puppetmaster is authentication on puppetclient ? > > > > > > > > U r all pleased to solve this problem. > > > > > > any help wll be appreciated ..... > > > > > > > > Thanks & Regards : > > > > > > Sanjiv Singh (iLabs ) > > > > > > Impetus Infotech (India) . > > > > > > > > -- > > > > > > You received this message because you are subscribed to the > Google > > > Groups > > > > > > "Puppet Users" group. > > > > > > To post to this group, send email to > puppet-users@googlegroups.com. > > > > > > To unsubscribe from this group, send email to > > > > > > puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com> > <puppet-users%2Bunsubscribe@googlegroups.com<puppet-users%252Bunsubscribe@googlegroups.com> > > > > > <puppet-users%2Bunsubscribe@googlegroups.com> > > > > > > . > > > > > > For more options, visit this group at > > > > > >http://groups.google.com/group/puppet-users?hl=en.-Hidequotedtext - > > > > > > > - Show quoted text - > > > > > -- > > > You received this message because you are subscribed to the Google > Groups > > > "Puppet Users" group. > > > To post to this group, send email to puppet-users@googlegroups.com. > > > To unsubscribe from this group, send email to > > > puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com> > <puppet-users%2Bunsubscribe@googlegroups.com<puppet-users%252Bunsubscribe@googlegroups.com> > > > > > . > > > For more options, visit this group at > > >http://groups.google.com/group/puppet-users?hl=en. > > > > > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to > puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com> > . > For more options, visit this group at > http://groups.google.com/group/puppet-users?hl=en. > >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
sanjiv.singh
2010-Nov-17 05:25 UTC
[Puppet Users] Re: puppetrun + notice: Denying unauthenticated .... access to puppetrunner.run
hi Ohad ,
i am showing U client log, which may help U in tracing out
exact problem .
/var/log/puppet/http.log
===============================[2010-11-16 16:02:47] INFO
WEBrick::HTTPServer#start: pid=2757
port=8139
[2010-11-16 16:02:54] DEBUG accept: 184.106.208.159:42821
[2010-11-16 16:02:54] DEBUG Puppet::Network::XMLRPC::WEBrickServlet is
invoked.
[2010-11-16 16:02:54] ERROR XMLRPC::FaultException: Host
184-106-208-159.static.cloud-ips.com(184.106.208.159) not authorized
to call puppetrunner.run
/usr/lib/ruby/site_ruby/1.8/puppet/network/xmlrpc/processor.rb:42:in
`process''
/usr/lib/ruby/site_ruby/1.8/puppet/network/xmlrpc/webrick_servlet.rb:
68:in `service''
/usr/lib/ruby/1.8/webrick/httpserver.rb:104:in `service''
/usr/lib/ruby/1.8/webrick/httpserver.rb:65:in `run''
/usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:
45:in `listen''
/usr/lib/ruby/1.8/webrick/server.rb:173:in `call''
/usr/lib/ruby/1.8/webrick/server.rb:173:in `start_thread''
/usr/lib/ruby/1.8/webrick/server.rb:162:in `start''
/usr/lib/ruby/1.8/webrick/server.rb:162:in `start_thread''
/usr/lib/ruby/1.8/webrick/server.rb:95:in `start''
/usr/lib/ruby/1.8/webrick/server.rb:92:in `each''
/usr/lib/ruby/1.8/webrick/server.rb:92:in `start''
/usr/lib/ruby/1.8/webrick/server.rb:23:in `start''
/usr/lib/ruby/1.8/webrick/server.rb:82:in `start''
/usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:42:in
`listen''
/usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:41:in
`initialize''
/usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:41:in `new''
/usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:41:in
`listen''
/usr/lib/ruby/1.8/thread.rb:135:in `synchronize''
/usr/lib/ruby/site_ruby/1.8/puppet/network/http/webrick.rb:38:in
`listen''
/usr/lib/ruby/site_ruby/1.8/puppet/network/server.rb:131:in `listen''
/usr/lib/ruby/site_ruby/1.8/puppet/network/server.rb:146:in `start''
/usr/lib/ruby/site_ruby/1.8/puppet/daemon.rb:128:in `start''
/usr/lib/ruby/site_ruby/1.8/puppet/application/puppetd.rb:116:in
`main''
/usr/lib/ruby/site_ruby/1.8/puppet/application.rb:226:in `send''
/usr/lib/ruby/site_ruby/1.8/puppet/application.rb:226:in
`run_command''
/usr/lib/ruby/site_ruby/1.8/puppet/application.rb:217:in `run''
/usr/lib/ruby/site_ruby/1.8/puppet/application.rb:306:in
`exit_on_fail''
/usr/lib/ruby/site_ruby/1.8/puppet/application.rb:217:in `run''
/usr/sbin/puppetd:160
[2010-11-16 16:02:54] 184-106-208-159.static.cloud-ips.com - - [16/Nov/
2010:16:02:54 UTC] "POST /RPC2 HTTP/1.1" 500 415
thanks ;
Sanjiv Singh(iLabs)
Impetus Infotech(India).
On Nov 16, 6:07 pm, Ohad Levy <ohadl...@gmail.com>
wrote:> On Tue, Nov 16, 2010 at 2:31 PM, sanjiv.singh
<sanjiv.si...@impetus.co.in>wrote:
>
>
>
> > hi Ohad ,
>
> > here are my namespaceauth.conf configurarion ....
>
> > on master :
> > ===============> > /etc/puppet/namespaceauth.conf
>
> > [fileserver]
> > allow *
> > [puppetmaster]
> > allow *
> > [puppetrunner]
> > allow *
>
> > on client :
> > ===================>
> > /etc/puppet/namespaceauth.conf
>
> > [puppetrunner]
> > allow *
>
> > try changing this to the fqdn of your master (or wherever you run
puppetrun
>
> from).
>
> Ohad
>
>
>
> > On Nov 16, 5:15 pm, Ohad Levy <ohadl...@gmail.com> wrote:
> > > Can you paste your namespace config file?
>
> > > try to make sure that your allow line matches to another host
fqdn (the
> > one
> > > you want to push from).
>
> > > Ohad
>
> > > On Tue, Nov 16, 2010 at 1:20 PM, sanjiv.singh <
> > sanjiv.si...@impetus.co.in>wrote:
>
> > > > hi Ohad,
> > > > a lot googling is done and gone through various blogs and
> > > > documentation..
>
> > > > and made what ever changes U suggested .
> > > > but still problem not resolved.
>
> > > > plz help me to resolve this problem.
>
> > > > On Nov 12, 12:17 pm, "sanjiv.singh"
<sanjiv.si...@impetus.co.in>
> > > > wrote:
> > > > > hi Ohad,
> > > > > thanks for reply....
> > > > > i m using puppet version 0.25.X on both side (client
& master)...
>
> > > > > and edited and added following file
/etc/puppet/auth.conf on
> > > > > client ...
>
> > > > > path /run
> > > > > method save
> > > > > allow *
>
> > > > > , but still problem is not resolved.....
>
> > > > > On Nov 11, 8:23 pm, Ohad Levy
<ohadl...@gmail.com> wrote:
>
> > > > > > if you are using puppet 2.6.x you need to adjust
your auth.conf too
> > > > > > seehttp://
> > theforeman.org/projects/foreman/wiki/puppetrunforanexample
>
> > > > > > Ohad
>
> > > > > > On Thu, Nov 11, 2010 at 5:04 PM, sanjiv.singh <
> > > > sanjiv.si...@impetus.co.in>wrote:
>
> > > > > > > hi all,
> > > > > > > i am in trouble with running puppetrun...
>
> > > > > > > i m able to run puppetd ...
> > > > > > > which successfully get configuration from
master and made changes
> > on
> > > > > > > client side....
>
> > > > > > > and following are senario i m using to run
puppetrun....
>
> > > > > > > there is no issue on port
> > > > > > > i had opened ports .....
> > > > > > > 8140 : on master
> > > > > > > 8139 : on client
>
> > > > > > > and added following file
/etc/puppet/namespaceauth.conf on
> > > > > > > client......
>
> > > > > > > [puppetrunner]
> > > > > > > allow *
>
> > > > > > > on master :
> > > > > > > ==============> > > > > >
> $ puppetrun --all --debug
>
> > > > > > > Triggering dmb-1289455541.puppet.com
> > > > > > > warning: peer certificate won''t be
verified in this SSL session
> > > > > > > Host dmb-1289455541.puppet.com failed:
HTTP-Error: 500 Internal
> > > > Server
> > > > > > > Error
> > > > > > > dmb-1289455541.puppet.com finished with exit
code 2
>
> > > > > > > on client :
> > > > > > > ==============> > > > > >
> $ puppetd --verbose --no-daemonize --listen --debug
> > > > > > > ..
> > > > > > > .
> > > > > > > .
> > > > > > > notice: Finished catalog run in 19.93 seconds
> > > > > > > debug: Using cached certificate for ca
> > > > > > > debug: Using cached certificate for
dmb-1289455541.puppet.com
> > > > > > > debug: Using cached certificate for ca
> > > > > > > debug: Using cached
certificate_revocation_list for ca
> > > > > > > notice: Denying unauthenticated client
> > 184-106-208-159.static.cloud-
> > > > > > > ips.com(184.106.208.159) access to
puppetrunner.run
>
> > > > > > > a lot googling is done and gone through
various blogs and
> > > > > > > documentation......,
> > > > > > > i had logined as root on both side (master
and client)
>
> > > > > > > question :
>
> > > > > > > 1) Can any budy tell me what is exactly d
problem ?
> > > > > > > 2) or Is there any extra configuration
required with puppetrun?
> > > > > > > 3) How is puppetmaster is authentication on
puppetclient ?
>
> > > > > > > U r all pleased to solve this problem.
> > > > > > > any help wll be appreciated .....
>
> > > > > > > Thanks & Regards :
> > > > > > > Sanjiv Singh (iLabs )
> > > > > > > Impetus Infotech (India) .
>
> > > > > > > --
> > > > > > > You received this message because you are
subscribed to the
> > Google
> > > > Groups
> > > > > > > "Puppet Users" group.
> > > > > > > To post to this group, send email to
> > puppet-users@googlegroups.com.
> > > > > > > To unsubscribe from this group, send email to
> > > > > > >
puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com>
> >
<puppet-users%2Bunsubscribe@googlegroups.com<puppet-users%252Bunsubscribe@googlegroups.com>
>
> > > > <puppet-users%2Bunsubscribe@googlegroups.com>
> > > > > > > .
> > > > > > > For more options, visit this group at
> > > > > >
>http://groups.google.com/group/puppet-users?hl=en.-Hidequotedtext-
>
> > > > > > - Show quoted text -
>
> > > > --
> > > > You received this message because you are subscribed to the
Google
> > Groups
> > > > "Puppet Users" group.
> > > > To post to this group, send email to
puppet-users@googlegroups.com.
> > > > To unsubscribe from this group, send email to
> > > >
puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com>
> >
<puppet-users%2Bunsubscribe@googlegroups.com<puppet-users%252Bunsubscribe@googlegroups.com>
>
> > > > .
> > > > For more options, visit this group at
> > > >http://groups.google.com/group/puppet-users?hl=en.
>
> > --
> > You received this message because you are subscribed to the Google
Groups
> > "Puppet Users" group.
> > To post to this group, send email to puppet-users@googlegroups.com.
> > To unsubscribe from this group, send email to
> >
puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com>
> > .
> > For more options, visit this group at
> >http://groups.google.com/group/puppet-users?hl=en.
>
>
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.