Displaying 20 results from an estimated 2000 matches similar to: "security of auto-sign?"
2006 Oct 18
19
Creating client certificates
I testing Puppet 0.19.3. If we decide to use it, we''d deploy it
across several thousand hosts. The method described for creating
client certificates described in the documentation - running
"puppetd --server <server> --waitforcert 60 --test" and "puppetca
--sign <client>" - is not practical for our installation. I''ve
tried creating
2007 Oct 09
9
puppetca is unable to sign certificate
Hi - I a ran puppetd -vt against a brand newly build host (which is
what I normally do for a new host) and got the usual message:
err: No certificate; running with reduced functionality.
info: Creating a new certificate request for sega-dev-1.
info: Requesting certificate
On the puppetmaster, I then list the waiting host with: puppetca
--list then sign the key. In this case, I decided that the
2010 Jan 28
2
How to execute an arbitrary script when a puppetclient ask for a manifest?
Hi,
I would like to use Puppet in the cloud (think gogrid) to configure
stem images.
Virtual machines are created/destroyed on the fly under control of a
load monitor.
For this reason we cannot sign manually new Puppet clients, instead,
we must use Puppet''s autosign feature.
At the moment, Puppet just permits to filter client manifest requests
with some regex over the hostname of the
2011 Feb 15
11
Puppetmasterd not receiving certificate request
Hi: I''m trying to configure Puppet on Ubuntu, and strangely I am never
able to generate a certificate because my server never shows any
pending certificate requests.
Put differently, on the server I am running puppetmasterd and on the
client I am able to connect to the server, but the client continues
printing
notice: Did not receive certificate
warning: peer certificate
2011 Mar 11
6
failed to retrieve certificate on Amazon EC2
Hi,
I''m using puppet on EC2 to setup my VMs with the following configuration:
# puppetd --version
0.25.5
# uname -a
Linux hostname.domain 2.6.16-xenU #1 SMP Mon May 28 03:41:49 SAST 2007 i686
i686 i386 GNU/Linux
But I keep facing some timeout from puppetd:
warning: peer certificate won''t be verified in this SSL session
Exiting; failed to retrieve certificate and waitforcert
2010 Jun 03
8
authenticating new nodes that are created by provisioning
Hey Folks,
I''m looking at doing automated provisioning of new servers and am trying to integrate puppet into this process. What I''m wondering though is what the best process for securely registering a new node is.
At the moment the first time puppet is run I have to then accept the certificate on the puppetmaster and then run puppet again.
What I would like to do is accept the
2009 Jun 30
43
Workstations and Certs
I am trying to come up with a workable solution in managing numerous
Mac workstations allowing a high degree of flexibility with regards to
certs.
My puppet environment is setup to application installation on machines
that have been ''imaged'' with a base OS and the puppet and facter apps.
So, when a Mac is ''imaged'' and subsequently re-booted, puppet is run
at
2011 Mar 31
5
puppetca and /etc/puppet/ssl
All,
I have --confdir=/etc/puppet/common in my /etc/init.d/puppetmaster and
/etc/init.d/puppet files, vardir set to /var/lib/puppet in
/etc/puppet/common/puppet.conf, and yet, every time I run puppetca it
creates /etc/puppet/ssl. Anyone know why?
Doug.
--
You received this message because you are subscribed to the Google Groups "Puppet Users" group.
To post to this group, send email
2010 Sep 29
5
err: Could not request certificate: sslv3 alert handshake failure error
Hi,
I''ve setup the puppetmaster to start 5 processes each listening on a
different port, with an Apache server in front. This works fine for
existing clients, however when I try to add a new client (ie. a newly
installed machine with no previous puppet configuration) I get this
error:
err: Could not request certificate: sslv3 alert handshake failure
error
Any ideas what''s
2011 Jul 29
2
Odd SSL issue - host not showing with puppet cert --list --all
Hi,
Just wondering if anyone had any similar issues OR idea''s on
troubleshooting the following problem.
I have a client/node registered to the puppet master and it is working
without any issues. On the server I can see it compile the catalog in
the logs. However when I run ''puppet cert --list --all'' it is not in
the list. Note we use auto signing
2012 Mar 01
1
puppet 2.7.11 + ruby 1.9.3 + passenger
So does anyone have a working setup with puppet 2.7.11 + ruby 1.9.3 + passenger?
I am currently using rack-1.0.1 (rack-1.4.1 had same behavior) and
passenger 3.0.11, and I get some authentication problems (shown
below). If I use an auth.conf that is wide open (auth any, allow *),
the agent can successfully retrieve his catalog and plugins and apply
them. Using webrick works fine as well.
The
2012 Apr 22
2
centos 6.2 - puppet 2.7.13 - SSL_connect returned=1 errno=0 state=SSLv3 read server session ticket A: tlsv1 alert protocol version
Hi!
I''ve installed puppetmaster 2.7.13 on a server with CentOS 6.2 with a rpm
supplied by yum.puppetlabs.com.
I''ve setup a apache2 vhost with mod_ssl and passenger. The server is
configured to autosign the cert requests.
The agent installed on the puppetmaster''s server works fine. I''ve a second
agent on a server which can sync with the server too. This
2010 Jun 15
8
puppetca unable to sign new certs - Invalid argument error
Hello
I have a puppetmasterd installation running on a Mac OS X 10.6.3
Server with puppet installed via macports.
Earlier today it was happily signing requests, before I upgraded
puppet from 0.24.8 to 0.25.4. Now I get "Invalid argument":
bash-3.2# puppetca --sign bouti.carbonplanet.com
bouti.carbonplanet.com
err: Could not call sign: Invalid argument
The only mention I can find on
2011 Jul 08
2
Puppetmaster setup with separate CA server configuration help
Hi All,
I am setting up puppetmaster with nginx and passenger and separating
the Puppetmaster primary CA server. I have 3 host
loadbalancer01 - Nginx doing LB on IP address and also running
puppetmaster with passenger under 127.0.0.1 (port 8140).
primaryca - Puppetmaster Primary CA
pclient - Puppet Client
The did the following steps:
On Primary CA server:
----------------------------
cd
2008 Apr 24
9
puppet ldap integration question
I want to deploy puppet with openldap for specific node configuration,
but only for specific nodes, every other node (not in LDAP) should
follow the ''default'' node definition.
Is it possible to mix and match like this?
As I try it I am getting err: Could not retrieve catalog: Could not find
node ''myhostname'' instead.
--
Mark Foster - Sr. Systems Engineer
2007 Sep 13
4
Eliminate pending signing requests
Hello,
How can I eliminate pending signing requests with puppetca?
2008 May 27
12
Puppetting the puppetmaster problems
Hi,
installing puppet at my first site was quite easy (not w/o problems,
but still). At the second site, I''ve run into something more serious.
First things first - I install puppetmaster on existing server, used
to keep LDAP db (my puppetmaster DOES NOT use LDAP, it just tries to
coexist on the same machine). The thing is, I need to puppet this
baby, so I''m running into a
2010 Jun 27
6
Borked Client Cert in 0.25
Here we go with puppet 0.25 certificate problems again.
I had a system where puppet was running fine. I reinstalled it.
Running puppet on the client causes this:
"Could not request certificate: Retrieved certificate does not match
private key; please remove certificate from server and regenerate it
with the current key".
Fine... so I run ''puppetca --clean
2008 May 05
11
puppetmasterd --mkusers
I''m trying to run puppetmasterd the first time with --mkusers. It
fails with the following error message:
001 # /usr/bin/puppetmasterd --mkusers
Could not configure for running; got 1 failure(s)
Adding --verbose and --debug does nothing to improve the output. How
do I begin to debug this?
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are
2012 Jul 18
5
See puppet output in stdout when running --no-daemonize inside a bash script
I''m simply trying to run puppet inside a bash script but I''m not seeing any
output.
#!/bin/bash
puppet master --mkusers --autosign --verbose --no-daemonize
Is there an I/O redirection incantation I''m missing?
--
You received this message because you are subscribed to the Google Groups "Puppet Users" group.
To view this discussion on the web visit