similar to: Kerberos for authentication?

Greetings! As you undoubtedly know, the fixes for CVE 2007-5162 in ruby break installations where puppetca has created certificates with a CommonName different from the server's real hostname. The Puppet clients quite correctly complains about hostname mismatch. A number of better and worse solutions have been suggested for this problem, especially in ticket #896. IMHO, there are two good

Hi All, I''ve been trying to resolve the SSL issue as described on the link at the bottom. I understand the issue and I''ve tried to implement all the different patches (one at a time .. :-). However for most of them there are either files missing or code not found in the files. It seems this is due to a version difference in Puppet. The docs and patches seem to be for the

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hey, would it be very hard to improve file''s source parameter to support downloading a file from a http server? I got some quite huge files (~100MB) to distribute and update on each of the servers, so doing this with puppet:// is a mess (and mostly failes with the known buffer error). Yours, Phillip -----BEGIN PGP SIGNATURE----- Version:

Why doesn''t the yum provider support version, I tried added ensure -> ''ver'' and it barfs up (on clients) with: <snip> err: //stan.gbuild.org/any-host/java/Package[j2sdk]/ensure: change from 1.4.2_12-fcs to 1.4.2_13-fcs failed: Package provider yum does not support specifying versions at /etc/puppet/manifests/classes/ java.pp:13 </snip>

Hello, I have been running multiple exec scripts that could run in parallel. Does puppet run as much as possible in parallel? If it does not, is there a way to specify that actions may be run in parallel? Also, is puppet a multiple or single thread application? Thank you, -- Rob -- ____________________________________________________________________________________ Sucker-punch spam

Hello all, puppet hangs while trying to restart a daemon when the associated config file changes, here the log: Mar 19 11:30:04 ingentTest puppetd[27390]: Starting Puppet client version 0.22.0 puppetd[27390]: Starting configuration run puppetd[27390]: (/ingenttest/qualsevolnode/guaita[guaita]/File[/etc/guaita.conf]/content) synced puppetd[27390]:

Hello. Hope you can help me further. I can vaguely remember that once I saw a reference how to preconfigure debconf in puppet manifests. So you can define answers in debconf inside of manifests. No idea where anymore. Anybody knows? greetinx Christo

I''ve submitted the following to howtoforge.com for approval. My plan is to create similar docs for OpenBSD, RHEL and installing from source. I''d certainly appreciate comments on how to improve the document, and feedback on errors. http://nixnotes.org/puppet.html Kent -- "It may be true that the law cannot make a man love me, but it can stop him from lynching me, and I

Hi all, Just reading through Luke''s interview on computerworld.com.au and I came across this statement: "This topic comes up on the list periodically, however, and most people are very tight-lipped about what they''re doing with Puppet." Being the chattermouth that I am, I''d like to take this opportunity to tell you all what we''re (that is, my

Greetings. Long story short ... configuration changes were made to my puppet clients while my puppet server was unavailable. I would like to run puppetd in such a way that it will list what files it would replace, but not actually replace them, so that I can synchronize my server with my various clients. rsync has a -n (--dry-run) option that does this. But I can''t find one in

notice: /subject.sol1.net/virtual_mail_server/File[/etc/postfix]/checksum: checksum changed ''{time}Thu Jan 25 16:31:08 EST 2007'' to ''{time}Thu Jan 25 16:36:39 EST 2007'' I know there''s something weird in the directory modification detection that causes the next run after things actually change to suffer from this problem, but I''m getting it

Following Luke''s very successful Puppet talk at GLLUG in London, which was so over-subscribed there were people queueing outside and pressing their little faces up against the glass, I wonder if the market will bear a London Puppet meet? If there are more than two or three people interested it might be worth arranging something, perhaps a pub session where we can talk about what

Hello there. Just to let you know i have just put in production mode puppet on 41 freeBSD 4.7 virtual servers (yes not real servers but "jailed ones"). I had some little problems with facter at first but i have manualy upgraded the servers that where affected by the little "facter does not read his facts" problem i had. I should have missed something in my deploiement.

I finally got my cfengine configs all objectified and separated into service-based configurations. But there are still many things that cfe can''t or won''t do very well, so I''m looking for a replacement. What about puppet? I am looking for something that I can use to manage services and applications, not hosts and files. It seems like puppet may have inherited some of

Hi there, I have a problem I don''t know how to solve. Let''s say you have two services, applications, whatever that communicate with each other, and they establish a shared password or key to authenticate to the other part. This happens with DHCP/DNS (I think is called dynamic zone update, the DHCP server updates the DNS zone with information from the dynamically configured

How are people upgrading puppet itself on their hosts that run puppetd? Can puppet be used to upgrade to a new puppet package via gem, rpm or some other package provider? How do you handle restarting? Just hoping theres a better way than "ssh and a for loop" or having to have another configuration management system installed.

This is possibly the dumbest question I have asked ever, but how do you set ACLs on files within a ZFS filesystem? Trying to use setfacl(1) diverts me to the acl(5) manpage; well, I know that I need to use NFSv4 style ACLs, but where is the utility to do so? This is on Solaris 10 Update 2. Thanks, Ceri -- That must be wonderful! I don''t understand it at all.

Hi, My environment is composed of ~250 workstations hitting a single puppetmaster server, which has been working fairly well up until now. The most recent change has been a migration of a lot of remote file copy objects which were previously handled with cfengine. client side puppetd calls to the puppetmaster.getconfig method are taking unreasonably long, on the order of 2-3 minutes. It

Hola: Hoy se han superado los 5000 paquetes disponibles en CRAN, una alegría y una cierta sensación de vértigo. Enhorabuena a todos los desarrolladores y usuarios de R. Contributed Packages Available Packages Currently, the CRAN package repository features 5001 available packages. ------------ próxima parte ------------ A non-text attachment was scrubbed... Name: smime.p7s Type:

I''ve just noticed that Puppet is failing to automatically apply changes when running as a Red Hat service. Changes get applied with no problems or errors when I run Puppet manually with "puppetd --test" but fail with a "Could not apply complete configuration: Parsed Providers must define a default target" error in /var/log/messages when the service runs automatically