puppet kick ceased working for me when I upgraded to 2.6.3; I''ve also tried it with 2.7.10 and get the same result:> root@npuppet.ucar.edu $ puppet kick vanilla.cms.ucar.edu > Triggering vanilla.cms.ucar.edu > Host vanilla.cms.ucar.edu failed: Server hostname ''vanilla.cms.ucar.edu'' did not match server certificate; expected ca > vanilla.cms.ucar.edu finished with exit code 2 > Failed: vanilla.cms.ucar.eduI''ve tried using --vardir and --ssldir flags, as suggested by http://projects.puppetlabs.com/issues/11431, but get the same result. Has anyone else seen this? -- Dan Urist durist@ucar.edu 303-497-2459 -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
I upgraded from puppet 0.25.5 to 2.6.12 recently and ended up doing puppetca --clean then --sign again for each of my hosts. Seemed a bit brute force, but it got me out of the bind. On Fri, Feb 24, 2012 at 12:30 PM, Dan Urist <durist@ucar.edu> wrote:> puppet kick ceased working for me when I upgraded to 2.6.3; I''ve also > tried it with 2.7.10 and get the same result: > >> root@npuppet.ucar.edu $ puppet kick vanilla.cms.ucar.edu >> Triggering vanilla.cms.ucar.edu >> Host vanilla.cms.ucar.edu failed: Server hostname ''vanilla.cms.ucar.edu'' did not match server certificate; expected ca >> vanilla.cms.ucar.edu finished with exit code 2 >> Failed: vanilla.cms.ucar.edu > > I''ve tried using --vardir and --ssldir flags, as suggested by > http://projects.puppetlabs.com/issues/11431, but get the same result. > > Has anyone else seen this? > -- > Dan Urist > durist@ucar.edu > 303-497-2459 > > -- > You received this message because you are subscribed to the Google Groups "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. > For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
On Fri, 24 Feb 2012 12:39:20 -0500 Adam Heinz <amh@metricwise.net> wrote:> I upgraded from puppet 0.25.5 to 2.6.12 recently and ended up doing > puppetca --clean then --sign again for each of my hosts. Seemed a bit > brute force, but it got me out of the bind.I tried cleaning out and regenerating the cert for my test client, but I get the same result-- I can run the agent successfully from the client, but puppet kick fails with the same error.> On Fri, Feb 24, 2012 at 12:30 PM, Dan Urist <durist@ucar.edu> wrote: > > puppet kick ceased working for me when I upgraded to 2.6.3; I''ve > > also tried it with 2.7.10 and get the same result: > > > >> root@npuppet.ucar.edu $ puppet kick vanilla.cms.ucar.edu > >> Triggering vanilla.cms.ucar.edu > >> Host vanilla.cms.ucar.edu failed: Server hostname > >> ''vanilla.cms.ucar.edu'' did not match server certificate; expected > >> ca vanilla.cms.ucar.edu finished with exit code 2 Failed: > >> vanilla.cms.ucar.edu > > > > I''ve tried using --vardir and --ssldir flags, as suggested by > > http://projects.puppetlabs.com/issues/11431, but get the same > > result. > > > > Has anyone else seen this? > > -- > > Dan Urist > > durist@ucar.edu > > 303-497-2459 > > > > -- > > You received this message because you are subscribed to the Google > > Groups "Puppet Users" group. To post to this group, send email to > > puppet-users@googlegroups.com. To unsubscribe from this group, send > > email to puppet-users+unsubscribe@googlegroups.com. For more > > options, visit this group at > > http://groups.google.com/group/puppet-users?hl=en. > > >-- Dan Urist durist@ucar.edu 303-497-2459 -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Never mind-- the issue was that my client is a virtual server (linux vserver) and the host''s puppet agent had the default bind address of 0.0.0.0, so it was grabbing all the addresses and the agent couldn''t start on the vserver. I changed the bind address for the host, started the agent on the client and now puppet kick is working. The errors were a bit cryptic, though... On Fri, 24 Feb 2012 11:29:17 -0700 Dan Urist <durist@ucar.edu> wrote:> On Fri, 24 Feb 2012 12:39:20 -0500 > Adam Heinz <amh@metricwise.net> wrote: > > > I upgraded from puppet 0.25.5 to 2.6.12 recently and ended up doing > > puppetca --clean then --sign again for each of my hosts. Seemed a > > bit brute force, but it got me out of the bind. > > I tried cleaning out and regenerating the cert for my test client, but > I get the same result-- I can run the agent successfully from the > client, but puppet kick fails with the same error. > > > > On Fri, Feb 24, 2012 at 12:30 PM, Dan Urist <durist@ucar.edu> wrote: > > > puppet kick ceased working for me when I upgraded to 2.6.3; I''ve > > > also tried it with 2.7.10 and get the same result: > > > > > >> root@npuppet.ucar.edu $ puppet kick vanilla.cms.ucar.edu > > >> Triggering vanilla.cms.ucar.edu > > >> Host vanilla.cms.ucar.edu failed: Server hostname > > >> ''vanilla.cms.ucar.edu'' did not match server certificate; expected > > >> ca vanilla.cms.ucar.edu finished with exit code 2 Failed: > > >> vanilla.cms.ucar.edu > > > > > > I''ve tried using --vardir and --ssldir flags, as suggested by > > > http://projects.puppetlabs.com/issues/11431, but get the same > > > result. > > > > > > Has anyone else seen this? > > > -- > > > Dan Urist > > > durist@ucar.edu > > > 303-497-2459 > > > > > > -- > > > You received this message because you are subscribed to the Google > > > Groups "Puppet Users" group. To post to this group, send email to > > > puppet-users@googlegroups.com. To unsubscribe from this group, > > > send email to puppet-users+unsubscribe@googlegroups.com. For more > > > options, visit this group at > > > http://groups.google.com/group/puppet-users?hl=en. > > > > > > > >-- Dan Urist durist@ucar.edu 303-497-2459 -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.