similar to: Removing circular dependant RPM files with Package.

Greetings! Are there any plans of using Kerberos for authentication in addition to (or in place of) SSL certificates in Puppet? Kerberos provides mutual, cryptographically strong authentication. A number of different services are Kerberos-enabled (SSH, NFSv4 and HTTP are common examples), and thus use the same authentication mechanism system-wide. At our site, almost all services and users are

Can anyone who''s having this problem please send details? I''m trying to reproduce it -- I''ve got 5 clients concurrently retrieving 200 10k files made of random binary, and I can''t get any corruption or memory growth at all. Is everyone experiencing the problem using Mongrel? Webrick? What versions of ruby? Are only big files affected? Small files?

Would it be possible to... ( I suppose that this is an enhancement request )... automatically do the following on a client-side manifest failure: 1. Wipe localconfig.yaml and state.yaml and try again (seems to fix most things for me) 2. Revert to a last known good configuration if all else fails. Thanks, Trevor _______________________________________________ Puppet-users mailing list

Does anyone know if it''s possible to do the following: Given the directory structure: /foo/bar /foo/bar/<bunch of stuff> Is it possible to set /foo/bar to, say 555, and all stuff below to 440 or the directory equivalent? Thanks, Trevor

Hi all, I''ve been looking for a good example for how one would build a module, but I couldn''t really find something that I liked, so I went ahead and tried to do it myself. The result is this: a git module (see attachment). Please have a look and comment on it, before I add it to the wiki. I especially want comments on the setup of the module itself, not so much on the git

i got a little idea there, should not puppet use environement LANG=C when managing facts or packages etc... ? i have LANG=fr_FR.UTF-8 and puppet choke on quite a few facts (erors messages with uname for exemple: Pour en savoir davantage, faites: « uname --help ». ) and also with packages updates : /usr/bin/apt-cache policy mysql-client-4.1 => err:

I''m not sure if this is the way things are supposed to happen but, when I specify a directory with recursion and md5 checksums, the directory itself is checksummed and assumed to have changed. Of course, if anything in the directory changed, the directory checksum will change. What I would like to do is to manipulate all of the files in a directory, but ignore the directory itself.

Hello, I''ve recently begun looking at Puppet as an alternative to Cfengine and I have a couple of questions. 1) Besides the information posted on the Puppet website, are there any critical differences between Puppet and Cfengine? 2) Does Puppet allow for client-specific file text manipulation. For instance, in Cfengine I can add a line of text to a file if the line doesn''t

I''m having a bit of trouble understanding what to do with the ''type'' attribute of ''file''. I would like to perform different operations on directories vs. files under the same structure, can ''type'' be used for this? Are there any other examples of doing this kind of thing? Thanks, Trevor

I suppose that this is a question about fileserver.conf but what I''m trying to do is to have something like the following in fileserver.conf: [$hostname] path /var/lib/puppet/files/privatefiles/$hostname.txt allow $hostname Basically, this would allow access to a file named <hostname>.txt for only the host to which it should be delivered. I''m not entirely sure

Ok, given the statement on the web page about unlesssystemuser under Resources ( http://reductivelabs.com/projects/puppet/documentation/typedocs.html#resources), I assume that users can be purged. However, when I attempt to do this with resources { user: purge => true, noop => true } and what I get is: err: Found a bug: private method ''split'' called for nil:NilClass.

If I do something like the following: class blah { File { mode => 111 } file { "/cheese": } } Will the File override stay within the class or break outside? Also, if I then do: class moo inherits blah { File { owner => bob } file { "/bobsfile": } } What will happen? Thanks, Trevor _______________________________________________ Puppet-users mailing

This was a fun one to track down... I was trying to use the append_if_no_such_line script from the wiki and it was working fine EXCEPT when I threw a notify at it. The notify appears to completely ignore both unless and onlyif within the exec for some reason. If I put the same test in the actual command line, it works fine. Example: unless => "/bin/grep -Fqe ''$line''

I''m about to leave town for three weeks and my home server keeps rebooting. It''s my mail server, unfortunately, so there''s a good chance you won''t get this. :/ Anyway, I''ve been meaning to do this for ages and ages, and it''s time to finally do so. I need to move all of the Puppet lists to a public, non-me provider, someone who has

What is everyone''s experience with Puppet on Ubuntu? Does it work as expected? Any caveats or oddities? -- DK -- Digant C Kasundra <digant@stanford.edu> Technical Lead, ITS Unix Systems and Applications, Stanford University

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Attached is a patch which attempts to enforce ''proper'' permissions of all files controlled directly by the puppet processes. All owners and groups are explicitly set as are all permissions. The idea is that the Puppet process configuration files should be relatively tamper resistant and at least throw a warning that the

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 I''ve created a small patch, below, to take care of the case when you wish to use yum to ensure that the latest version of the package is installed but the yum server is down. This patch makes the assumption that, in the case of an yum query error, you want to assume that, if the application is installed, it is the latest. This allows you

https://build-automation.108.redhat.com/ Just a thought that it might get some more press. Trevor

I''ve been tinkering around with managing users and am concerned with the overall administrative usability of the inheritance overrides. For instance, the user games: redhat_base: user { games: ensure => present } local_site inherits redhat_base: User[games] { ensure => absent } This is fine, but imagine a few levels of nesting later with an admin that wants to ensure that a

Luke has mentioned a few times that people are fairly quiet about numbers, so I thought I''d help out there. Our production Puppet server currently has 75 signed certificates, and I believe essentially all of those systems are active. We have an extremely diverse environment; there are rarely more than three or four systems that can use the same set of classes. So that represents quite