search for: namespaceauth

I''m trying to wrap my head around these files... do both of them need to reside on the client and master? are there any docs that describe these files and what all the option/ sections are and what they do? Thanks all.... -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to

.../main/File[/var/lib/puppet/ssl]: Autorequiring File[/var/lib/puppet] ... debug: Stored state in 0.03 seconds notice: Finished configuration run in 1.43 seconds debug: Creating default schedules notice: Denying unauthenticated client puppetmaster(10.17.4.5) access to puppetrunner.run I have this in namespaceauth.conf: [puppetrunner] allow puppetmaster I have tried changing it to "allow *" but it makes no difference. What to do? -- Anders

Greetings, I''ve two questions for y''all. 1) I''ve setup an alternate installation path for puppet in a site local directory outside of ''the usual places''. Puppetd seems to insist that /etc/puppet/namespaceauth.conf exists despite setting :authconfig in both puppet and puppetd. As a result part of my installation now includes a symlink to point /etc/puppet at the new installation root /foo/conf/puppet. Any ideas why that would be? 2) Despite having a symlink in place from #1, evertime puppet runs, it u...

Hi puppetiers, recently I switched to using Mongrel webserver in effort to get rid of those annoying "end of file reached" errors and increase performance. It did the trick beautifully, but now a lot of my reports are plagued by another error message: --- err: Could not call fileserver.describe: #<Errno::EPERM: Operation not permitted - connect(2)>

Hi, I''m not sure what I''ve did wrong, I now get an error message denying authenticated client ... access to puppetreports.repot anyone has an idea where should i look ? Thanks, Ohad _______________________________________________ Puppet-users mailing list Puppet-users@madstop.com https://mail.madstop.com/mailman/listinfo/puppet-users

Guys, I seriously could not find this topic in the documentation. What do you do when you need to force puppetd hosts get the new settings from puppetmasterd? What I found was only sending USR1 signal to the client process in order to make it refresh its configuration from the master. But I find it a bit inconvenient for a large amount of hosts. There is also puppetrun which, if I understand

...tinet Host ubuntu4.ttinet failed: Error 400 on SERVER: ''save '' is not an allowed value for method directive ubuntu4.ttinet finished with exit code 2 Failed: ubuntu4.ttinet root@ubuntu4:~# cat /etc/puppet/auth.conf path /run method save allow * root@ubuntu4:~# cat /etc/puppet/namespaceauth.conf [puppetrunner] allow * root@ubuntu4:~# grep listen /etc/puppet/* /etc/puppet/puppet.conf: listen = true -- Craig White ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ craig.white@ttiltd.com 1.800.869.6908 ~~~~~~~~~~~~~~~~~~~~~~~~~~~ www.ttiassessments.com Need help communicating between generations at...

I''m getting the following error when trying to run puppetd on the server. I''m using version 0.23.2 from the dlutter repo. The OS is RHEL 5. Any idea what this is? I see reference to namespaceauth.conf regarding this problem but I can''t find anything definitive. [puppet]# puppetd -v -o err: Could not call puppetmaster.freshness: #<RuntimeError: HTTP-Error: 500 Internal Server Error > err: Could not retrieve configuration: HTTP-Error: 500 Internal Server Error Thanks, Kent

...led: Certificates were not trusted: tlsv1 alert unknown ca client_host.example.com finished with exit code 2 Failed: client_host.example.com The client is running "puppetd --listen" and listening on port 8139. No firewall in between the two machines. I''ve created an /etc/puppet/namespaceauth.conf file on the client side. Containing: [puppetrun] allow server.example.com What have I missed? Thanks, Kent -- "It may be true that the law cannot make a man love me, but it can stop him from lynching me, and I think that''s pretty important." - Martin Luther King Jr.

What''s this mean? root@gravity:/etc/puppet/manifests# puppetd -v --listen info: Starting handler for Runner info: Starting server for Puppet version 0.22.1 info: Listening on port 8139 notice: Starting Puppet client version 0.22.1 err: Could not run Puppet::Client::MasterClient: Host gravity.example.org not authorized to call puppetmaster.freshness Thanks, Kent -- "It may be true

...sten to the puppetd command-line. Puppetd would run and then immediately exit. I couldn''t figure out the cause because there was nothing in the logs. I finally figured it out when I ran it with --verbose. # puppetd --listen --verbose Will not start without authorization file /etc/puppet/namespaceauth.conf My guess is that the fatal message is going to stderr. But the program has already forked and redirected stderr to /dev/null. The message does not end up in the log file which makes it hard to diagnose the problem. I am running on Centos 4 using the packages from Fedora Extras. - Ian

...9;re ready to deploy them. I can''t seem to get this to work. I have asked around the IRC channel and received a few pointers, but it''s still not working correctly. I''ve added the "listen = true" line to the puppet.conf file on each node, as well as creating a namespaceauth.conf file on each node, with wide open permissions at the moment. When I attempt to run puppet kick from the master, I receive the following error: [root@admin puppet]# puppet kick -d test.foo.com Triggering test.foo.com Host test.foo.com failed: SSL_connect returned=1 errno=0 state=SSLv3 read se...

...state of resource: can''t convert nil into String Oct 27 22:35:47 svn puppetd[79458]: (//basenode/puppet/File[/var/puppet]) Failed to retrieve current state of resource: can''t convert nil into String Oct 27 22:35:47 svn puppetd[79458]: (//basenode/puppet/File[/usr/local/etc/puppet/namespaceauth.conf]) Failed to retrieve current state of resource: can''t convert nil into String All the mentioned files were present. There does seem to be some correlation between these errors and what I changed in puppetd.conf. Before, puppetd didn''t set confdir and vardir. The new puppetd....

Hi, installing puppet at my first site was quite easy (not w/o problems, but still). At the second site, I''ve run into something more serious. First things first - I install puppetmaster on existing server, used to keep LDAP db (my puppetmaster DOES NOT use LDAP, it just tries to coexist on the same machine). The thing is, I need to puppet this baby, so I''m running into a

Hello all, I''ve tried to run ''puppetrun'', but there seems something unconfigured regarding the certificates. The reverse way (puppetd pulls the config from puppetmasterd) works fine. The namespaceauth.conf on the client (where puppetd runs) is configured as follows: [puppetrunner] allow *.abc.net (also tried the calling host: puppet1.abc.net) But when I call ''puppetrun --debug --host puppet2.abc.net'' : Failed to load ruby LDAP library. LDAP functionality will not be availab...

...ebug: puppetconfig/puppet/file=/var/lib/puppet/state/state.yaml: subscribes to /var/lib/puppet/state debug: puppetconfig/puppet/file=/etc/puppet/ssl: Autorequiring file /etc/puppet debug: puppetconfig/puppet/file=/etc/puppet/ssl: subscribes to /etc/puppet debug: puppetconfig/puppet/file=/etc/puppet/namespaceauth.conf: Autorequiring file /etc/puppet debug: puppetconfig/puppet/file=/etc/puppet/namespaceauth.conf: subscribes to /etc/puppet debug: puppetconfig/certificates/file=/etc/puppet/ssl/private: Autorequiring file /etc/puppet debug: puppetconfig/certificates/file=/etc/puppet/ssl/private: Autorequiring f...

Hi, I''ve setup my systems to do reporting as explained in https:// reductivelabs.com/cgi-bin/puppet.cgi/wiki/ReportsAndReporting, with tagmail defined as one of the report types - but I do not recieve any mail at all. I''ve configured a tagmail.conf file like this: all: root@localhost But the documentation mentions three options, namely sendmail, reportfrom,

...sl/private_keys]: Autorequiring File[/var/lib/puppet/ssl] debug: /puppetconfig/main/File[/var/lib/puppet/ssl]: Autorequiring File[/var/lib/puppet] debug: /puppetconfig/ssl/File[/var/lib/puppet/ssl/public_keys]: Autorequiring File[/var/lib/puppet/ssl] debug: /puppetconfig/main/File[/etc/puppet/namespaceauth.conf]: Autorequiring File[/etc/puppet] debug: /puppetconfig/main/File[/var/lib/puppet/plugins]: Autorequiring File[/var/lib/puppet] debug: /puppetconfig/ssl/File[/var/lib/puppet/ssl/private/password]: Autorequiring File[/var/lib/puppet/ssl/private] debug: /puppetconfig/ca/File[/var/lib/puppet...

...et_server ? { # puppet master is always 2.6 $fqdn => template("puppet/master/puppet.conf.erb"), default => template("puppet/puppet_2.6.conf.erb"), }, require => Package["puppet"], } # File File["namespaceauth.conf"] { content => $my_puppet_server ?{ # puppet master is always 2.6 $fqdn => template("puppet/master/ namespaceauth.conf.erb"), default => template("puppet/ namespaceauth_2.6.conf.erb"), }, requir...

I''m trying to get puppetrun to work, without luck so far. I have my puppetmaster and clients working fine with the clients polling the master. Now I want to be able to force an update. Using version 0.23.2 On the client I set listen=true and created the namespaceauth.conf file. Restarted puppetd and it appears fine. On the master I run puppetrun as root and get root@plane:/etc/puppet# puppetrun --debug --host planevm1 debug: Parsing /etc/puppet/puppet.conf debug: Puppet::Network::Client::Runner: defining puppetrunner.run /usr/lib/ruby/1.8/net/http.rb:586:in...