similar to: SOLVED: Re: SSL delegation difficulties

hey all, trying to get SSL cert deligation working based on http://reductivelabs.com/trac/puppet/wiki/PuppetScalability. All of the commands run without any problems, however I''m still not getting it to work. One perplexing thing is openssl reports the cert is okay. # openssl verify -CAfile /var/lib/puppet/ssl/certs/ca.pem /var/lib/puppet/ssl/certs/test1.localdomain.pem

I''m having difficulty getting my head around some CA issues My client has: [puppetd] ca_server=puppetca.mydomain.com and puppet resolves to a different machine. when puppet connects, it requests a signature from puppetca.mydomain.combut then on the next pass fails with the following: err: Could not retrieve catalog: Certificates were not trusted: SSL_connect returned=1 errno=0

hi, i''m trying to set up my puppetmaster infrastructure with multiple puppetservers behind load balancers in each of our datacenters. i''m using 0.24.6. i''ve read the howto on puppet scalability, and i think i''ve got the ssl config working correct, but i''m noticing that when puppetd is used to build a puppetmaster, some of the files in $vardir/ ssl

Greetings ... Andrew Bartlett wrote: >> I am posting here, because I believe this a little more technical than >>"I can't get my server work?" ... >> >> > >This is still not the place. Samba technical is not technical >support, it's technical development of Samba. > > Okay, sorry ... done ... Sorry for the long delay, but

Hi, As RijilV pointed out in http://mail.madstop.com/pipermail/puppet- users/2006-October/000541.html there may be af bug in the import code of 0.20.0: I noticed the same thing about schedules as he has, and I bumped into one more: Type defaults set in a file that gets imported by site.pp yanks a similar error. Moving the code into site.pp removes the error message. -- Med venlig

I''m using the standard webrick server with puppet, and I just started getting this today (for no apparent reason). info: Loading fact custom_facts info: Retrieving plugins err: /File[/var/puppet/lib]: Failed to generate additional resources during transaction: Certificates were not trusted: tlsv1 alert decrypt error err: /File[/var/puppet/lib]: Failed to retrieve current state of

Hello, I just installed the latest version of puppet and puppetmaster on an up to date RHEL4 system. If I turn on ''storeconfigs'' on the puppetmaster server I get the following error: debug: Calling puppetmaster.getconfigerr: Could not retrieve configuration: Uncaught exception No such file to load -- sqlite3 in method puppetmaster.getconfig I have gems and rails installed

Hi all, my name is Arnau Bria and I''m a sys admin in a center where we must deal with hundred hosts. We''re currently working with quattor, but it''s too complex for our purposes, so I''m looking for new admin tool. I''ve been playing with CFengine for few days (2 or 3) and I''ve seen some limitations that makes me thing that CFE is not our

Hello, When I tested out SVN 1987, puppetmasterd barfs because gems is looking in puppet/rails/lib no puppet/rails. This is under FC6 with gems/rails installed from source. The simple fix for me was to create the directory lib and link the files in /puppet/rails there. .r'' Original error: # puppetmasterd --debug /usr/lib/ruby/site_ruby/1.8/rubygems/custom_require.rb:27:in

I have tried to setup Apache with passenger to host the puppetmaster but I also want to cache. I have no problems running puppet within Passenger with httpd. I also enabled mod_disk_cache within Apache. However, I still see my puppet client htting the puppetmaster and the puppetmaster compiles the manifest every time. In /var/cache/mod_cache, I can see that the data was properly cached.

I am working on setting up a Puppet configuration where some of the data is stored on a DRBD volume. The modules and vardir are stored on the drbd volume. The puppet.conf files point to the drbd volume for vardir. I created a cert for a VIP puppet-master using the puppetca -- create command I had everything working on the primary drbd node, but when I fail over, everything starts up fine, but I

Hello, When I kick off SVN1992 with storeconfigs=yes, I get the following error: err: Could not store configs: SQLite3::SQLException: SQL logic error or missing database: INSERT INTO resources ("exported", "line", "title", "host_id", "restype", "source_file_id") VALUES(NULL, 23, ''svnpkgadd-emacs-nox-etc'', NULL, NULL,

Hey Guys, I am sorry if this sounds silly but I am new to puppet. I am trying to append a particular line to the apt.conf file on all the clients that are running puppetd. Is there any way to do this using puppet. Any help would be appreciated! Thank you! -- Regards, Swati --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google

Maybe I''ve missed the obvious way of doing this, but is there an easy way to do something only when a package is installed but not updated? I''ve tried a few ideas but they all seem to be heading down the wrong path (tm). Thanks in advance. _______________________________________________ Puppet-users mailing list Puppet-users@madstop.com

Hi I''m wondering if it''s possible to define some defaults for the package type. What I want is that package install/updates only happens at certain times of the day. I could do: class shorewall { package { "shorewall": ensure => latest, schedule => maintenance } } for every package I want to manage. But that means I have to type

Hey thanks for the new version, but I seem to be having some troubles. I have a number of schedules defined in my configuration, something like: schedule { once_a_day: period => daily, repeat => 1, } Using 0.20.0 of the server I get: err: Could not retrieve configuration: Duplicate definition: schedule[once_a_day] is already defined in file

Hello We have a OpenLDAP-2.2.23 + Samba 3.0.14a and the system is logging a lot (one to each minute, more or less) of errors like this: server smbd[10799]: [ID 510469 daemon.error] nss_ldap: could not get LDAP result - Can't contact LDAP server Well, I would like to ask to samba specialists if is possible that the problem is this slapd.conf option: idletimeout 30 I?m using it because

Hi, i have some problems with xen-3.0.1 and the network-bridge script. After ''/etc/init.d/xend start'' or ''/etc/xen/script/network-bridge start'' everything works perfect (as well as the domU''s network) - but only for a few seconds (~20s). After that the network seems to crash - no outgoing or incoming connection possible. I have read a forum

Hi, I''m running into a problem with the user type with puppet 0.20.1... this worked before with 0.19.x at least, not sure about 0.20. But I''ve got adduser.pp: <snip> define adduser($uid, $gid, $groups="users", $membership="minimum") { group { $name: gid => $gid, allowdupe => false, ensure

There was a discussion a while ago about adding inheritance to definitions. There is a need for a way to specialize parameters while allowing passing other options. This comes up with remotefile where it would be nice to have a default server location but not specify all the parameters (and their defaults) in the definition. Was there a change to the syntax? Is there a way to accomplish this?