Michael Altfield
2012-Dec-17 22:12 UTC
[Puppet Users] puppet-dashboard install not generating ''dashboard'' cert
Hello, I''m trying to get puppet-dashboard installed on a CentOS 6.3 machine running puppet v3.0.1. I''m following the puppet-dashboard documentation here: http://docs.puppetlabs.com/dashboard/manual/1.2/configuring.html In the documentation page linked above, it says: Puppet uses SSL certificates to control who can make requests to the puppet> master, so Dashboard has to obtain a signed cert before asking for facts or > files. To do this, edit config/settings.yml to ensure that the ca_server > and ca_port settings match the address and port of your puppet master, > then run the following commands: > > $ sudo -u puppet-dashboard rake cert:create_key_pair > $ sudo -u puppet-dashboard rake cert:request > > You’ll need to sign the certificate request on the master by running puppet > cert sign dashboard. Then, from Dashboard’s directory again, run: >However, here''s what I get when I follow the documentation: [root@puppetmaster-01 puppet-dashboard]# sudo -u puppet-dashboard rake> cert:create_key_pair > [root@puppetmaster-01 puppet-dashboard]# sudo -u puppet-dashboard rake > cert:request > [root@puppetmaster-01 puppet-dashboard]# puppet cert sign dashboard > *Error: Could not find certificate request for dashboard* > [root@puppetmaster-01 puppet-dashboard]# ls -lah certs > total 8.0K > drwxr-xr-x 2 puppet-dashboard puppet-dashboard 4.0K Dec 17 17:06 . > drwxr-xr-x 17 root root 4.0K Dec 17 11:35 .. >As you can see from the last command, no certificate files are actually generated. I verified that the puppet server is indeed running on the ''ca_server'' on ''ca_port'' as defined in config/settings.yml In fact, I can manage to get a certificate as root: [root@puppetmaster-01 puppet-dashboard]# rake cert:create_key_pair> DEPRECATION WARNING: Rake tasks in vendor/plugins/delayed_job/tasks are > deprecated. Use lib/tasks instead. (called from > /usr/share/puppet-dashboard/vendor/rails/railties/lib/tasks/rails.rb:10) > [root@puppetmaster-01 puppet-dashboard]# ls -lah certs > total 16K > drwxr-xr-x 2 puppet-dashboard puppet-dashboard 4.0K Dec 17 17:09 . > drwxr-xr-x 17 root root 4.0K Dec 17 11:35 .. > -r--r----- 1 root root 887 Dec 17 17:09 > dashboard.private_key.pem > -rw------- 1 root root 251 Dec 17 17:09 > dashboard.public_key.pem >...but this breaks on the next command (probably because I''m root) [root@puppetmaster-01 puppet-dashboard]# rake cert:request> DEPRECATION WARNING: Rake tasks in vendor/plugins/delayed_job/tasks are > deprecated. Use lib/tasks instead. (called from > /usr/share/puppet-dashboard/vendor/rails/railties/lib/tasks/rails.rb:10) > rake aborted! > 500 "Internal Server Error" >Tasks: TOP => cert:request (See full trace by running task with --trace) Can anyone help me figure out why the ''puppet-dashboard'' user cannot generate a ''dashboard'' certificate using `sudo -u puppet-dashboard rake cert:create_key_pair`? Any help will be much appreciated! -Michael -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To view this discussion on the web visit https://groups.google.com/d/msg/puppet-users/-/uZaUSBG2OFgJ. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.