Displaying 20 results from an estimated 1000 matches similar to: "Problems with certs"
2010 May 20
10
Question about templates from variables
I''m running into an issue trying to do something like the following:
class test {
file {"test":
content => template(''mytemplate1'',''mytemplate2''),
}
}
class test::test2 inherits test {
File["test"] { content +> template(''mytemplate3''), }
}
So, basically I want the inherited class to tack on another
2010 Mar 30
4
Cert error or something
Cant seem to fix this problem, need help
---
Tue Mar 30 11:21:17 +0000 2010 //yumconf/File[/etc/hosts] (debug):
Creating checksum {md5}0eea71665fb6890c06421fd13aa3f849
Tue Mar 30 11:21:17 +0000 2010
//yumconf/File[/etc/yum.repos.d/CentOS-Base.repo]/checksum (debug):
Initializing checksum hash
Tue Mar 30 11:21:17 +0000 2010
//yumconf/File[/etc/yum.repos.d/CentOS-Base.repo] (debug): Creating
2010 Feb 02
32
Making the new users experience easier
Just one more email and I''ll let you go for a few hours :)
One of the things I like to see in apps is that they are immediately
intuitive and easy to use for new users. I think Puppet is really good
here, but there''s opportunity to make everything better. We want
everyone to love Puppet from their first few minutes using it, all the
way through to datacenter nirvana.
2011 Mar 31
5
puppetca and /etc/puppet/ssl
All,
I have --confdir=/etc/puppet/common in my /etc/init.d/puppetmaster and
/etc/init.d/puppet files, vardir set to /var/lib/puppet in
/etc/puppet/common/puppet.conf, and yet, every time I run puppetca it
creates /etc/puppet/ssl. Anyone know why?
Doug.
--
You received this message because you are subscribed to the Google Groups "Puppet Users" group.
To post to this group, send email
2010 Jun 15
8
puppetca unable to sign new certs - Invalid argument error
Hello
I have a puppetmasterd installation running on a Mac OS X 10.6.3
Server with puppet installed via macports.
Earlier today it was happily signing requests, before I upgraded
puppet from 0.24.8 to 0.25.4. Now I get "Invalid argument":
bash-3.2# puppetca --sign bouti.carbonplanet.com
bouti.carbonplanet.com
err: Could not call sign: Invalid argument
The only mention I can find on
2007 Apr 05
1
signing certs
I noticed a behaviour which is kind of confusing. I have the puppetmasterd
running. Now I want a new client to connect. I edit the site.pp and add
the client. When the client is started I can see it with puppetca --list.
So I sign the client. When it next tries to connect it shows:
notice: Allowing ::ffff:192.168.x.y(::ffff:192.168.x.y) untrusted access
to CA methods
notice: Host
2011 Jul 08
2
Puppetmaster setup with separate CA server configuration help
Hi All,
I am setting up puppetmaster with nginx and passenger and separating
the Puppetmaster primary CA server. I have 3 host
loadbalancer01 - Nginx doing LB on IP address and also running
puppetmaster with passenger under 127.0.0.1 (port 8140).
primaryca - Puppetmaster Primary CA
pclient - Puppet Client
The did the following steps:
On Primary CA server:
----------------------------
cd
2011 Mar 11
6
failed to retrieve certificate on Amazon EC2
Hi,
I''m using puppet on EC2 to setup my VMs with the following configuration:
# puppetd --version
0.25.5
# uname -a
Linux hostname.domain 2.6.16-xenU #1 SMP Mon May 28 03:41:49 SAST 2007 i686
i686 i386 GNU/Linux
But I keep facing some timeout from puppetd:
warning: peer certificate won''t be verified in this SSL session
Exiting; failed to retrieve certificate and waitforcert
2010 Oct 15
5
alternate hostnames, keys, and certs
I''d like to extend my use of puppet to manage my desktop/notebook macs.
As others have noted, the hostname of the mobile machines tends to change frequently, so basing the node name (in my site.pp) and the corresponding cert and private key names seems to be an issue.
I seem to recall somewhat talking about this at Puppet Camp last week…..
Generally my signing strategy is always to
2010 Jun 27
6
Borked Client Cert in 0.25
Here we go with puppet 0.25 certificate problems again.
I had a system where puppet was running fine. I reinstalled it.
Running puppet on the client causes this:
"Could not request certificate: Retrieved certificate does not match
private key; please remove certificate from server and regenerate it
with the current key".
Fine... so I run ''puppetca --clean
2009 Jun 30
43
Workstations and Certs
I am trying to come up with a workable solution in managing numerous
Mac workstations allowing a high degree of flexibility with regards to
certs.
My puppet environment is setup to application installation on machines
that have been ''imaged'' with a base OS and the puppet and facter apps.
So, when a Mac is ''imaged'' and subsequently re-booted, puppet is run
at
2008 Dec 04
4
puppetmaster built via puppetd
hi,
i''m trying to set up my puppetmaster infrastructure with multiple
puppetservers behind load balancers in each of our datacenters. i''m
using 0.24.6. i''ve read the howto on puppet scalability, and i think
i''ve got the ssl config working correct, but i''m noticing that when
puppetd is used to build a puppetmaster, some of the files in $vardir/
ssl
2011 Dec 29
21
Puppetserver error
Hello everyone,
I am new to puppet. I have installed on redhat Enterprise 5and seems
to be working fine. Couple days ago I was testing some permissions on /
etc folder and applied 600 /etc and sub folders. Although I have
reverted the permission but I am having issues on puppetmaster.
Currently I have these permission on etc 755 and puppet folder:
my /etc folder is 755 and puppet folder with tese
2008 Jul 22
1
Certs and NAT and such
I would like to use Puppet to update various remote machines
automatically.
Some of these machines are on the other side of cable modems on local
networks. An extreme example would be in a hotel room, but a normal
example would be somebody''s "home office".
Leaving the hotel scenario aside (but it would be nice if I could make
it work), when the remote machine would try to
2012 Apr 22
2
centos 6.2 - puppet 2.7.13 - SSL_connect returned=1 errno=0 state=SSLv3 read server session ticket A: tlsv1 alert protocol version
Hi!
I''ve installed puppetmaster 2.7.13 on a server with CentOS 6.2 with a rpm
supplied by yum.puppetlabs.com.
I''ve setup a apache2 vhost with mod_ssl and passenger. The server is
configured to autosign the cert requests.
The agent installed on the puppetmaster''s server works fine. I''ve a second
agent on a server which can sync with the server too. This
2007 Apr 09
8
cert problem with client
I recently had a working puppet server serving around 4-5 clients. One of
the clients needed to be re-built and now only that client cannot connect.
puppetca --clean hostname did not work
So here is what I did on both the server/client I removed /var/lib/puppet/*
Then I restarted the server via
puppetmasterd --mkusers --verbose
I then connect in via the client with
/usr/bin/ruby
2012 Feb 06
1
Puppet / Passenger SSL Problems with DRBD
I am working on setting up a Puppet configuration where some of the
data is stored on a DRBD volume. The modules and vardir are stored on
the drbd volume. The puppet.conf files point to the drbd volume for
vardir. I created a cert for a VIP puppet-master using the puppetca --
create command
I had everything working on the primary drbd node, but when I fail
over, everything starts up fine, but I
2008 Nov 10
12
CA_Server woes
I''m having difficulty getting my head around some CA issues
My client has:
[puppetd]
ca_server=puppetca.mydomain.com
and puppet resolves to a different machine.
when puppet connects, it requests a signature from
puppetca.mydomain.combut then on the next pass fails with the
following:
err: Could not retrieve catalog: Certificates were not trusted: SSL_connect
returned=1 errno=0
2010 Feb 18
14
Rebuilding machines from foreman
Hello,
I ran into this problem today, I am trying to implement "One click
installation", I followed foreman howtos and set up the pre-requisites
accordingly.
However, when I click on "Build" button, I get the following errors in the
foreman''s console and another error in the web interface indicating that the
installation failed. Any ideas?
*"PuppetCA: SSL/CA or
2011 Apr 18
4
Certificate request does not match existing certificate
Hello there,
I have a problem while I''m trying to puppetize a client, I get this
error:
err: Could not request certificate: Certificate retrieval failed:
Certificate request does not match existing certificate; run ''puppetca
--clean puppetclienttest.sl.ss''.
I checked
-Shutdown puppet on client/server side, delete ssl/ dir to regenerate
certificate.
-Be sure that the