Puppet users - Apr 2013 - Need help! Puppet could not request certificate: No route to host -connect(2)

Hello,

I am installing puppet and keep getting this error [Puppet could not 
request certificate:  No route to host -connect(2)]

My DNS is resloving and i can ping the master from the agent.  

I have added this line to the iptables [iptables  -I INPUT -s 192.168.1.20 
-m tcp -p tcp --dport 8140 -j ACCEPT], where the IP is my agent.

I have also added my master ip to /etc/puppet/puppet.conf

Why am I still getting this error?  
**

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.

Try using "telnet <your_master_fqdn> 8140"  This will validate
the network
on the proper port.  ping does not use port 8140.

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.

I am able to ssh to both host.  Am now getting the error:  [Could not 
request certificate:  Connection refused]

This error is different to the first error.  This one seems to deal with IP 
Tables rules.

On Tuesday, April 23, 2013 12:37:58 PM UTC-4, Schofield
wrote:
>
>
> Try using "telnet <your_master_fqdn> 8140"  This will
validate the network
> on the proper port.  ping does not use port 8140.
>
-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.

You get also this error when puppet master server is disabled or 
unresponsive (there is no response to the client and you get error)
Make sure that your puppet master server is running by command:

ps -aux

If process is running and you still get this error message, kill this 
process (kill ''PID'') and try run server in no--damenoize mode
by command:

puppet master --no-daemonize --verbose

then try connect again and observe server responses
Best Regards

W dniu wtorek, 23 kwietnia 2013 16:57:02 UTC+2 użytkownik mart...@gmail.com 
napisał:
>
> Hello,
>
> I am installing puppet and keep getting this error [Puppet could not 
> request certificate:  No route to host -connect(2)]
>
> My DNS is resloving and i can ping the master from the agent.  
>
> I have added this line to the iptables [iptables  -I INPUT -s 192.168.1.20 
> -m tcp -p tcp --dport 8140 -j ACCEPT], where the IP is my agent.
>
> I have also added my master ip to /etc/puppet/puppet.conf
>
> Why am I still getting this error?  
>
>
-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.

On 04/24/2013 02:34 PM, Przemek wrote:
> ps -aux
That should just be "ps aux", no dash, actually.

On 04/24/2013 12:24 AM, martpher@gmail.com wrote:
> I am able to ssh to both host.  Am now getting the error:  [Could not
> request certificate:  Connection refused]
>
> This error is different to the first error.  This one seems to deal with
> IP Tables rules.
It pretty much says that the port is not open. This may or may not be
iptables related.

On the agent, make extra sure that "puppet" (or whatever you use as
servername) resolves to a valid IP of the master machine.

On the master, use "netstat -tlnp" to verify that there is indeed a
process listening to port 8140, either on 0.0.0.0 or the dedicated
master IP address. In the former case, make sure the master IP is bound
to the machine.

HTH,
Felix

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.