similar to: puppet random errors

Hello, Attempting to setup a CA primary/standby as well as seperate puppetmaster servers (all running Apache/Passenger) behind another Apache/Passenger type load balancer. Clients are not getting certs:- err: Could not request certificate: Could not intern from s: nested asn1 error Clearly an SSL issue but not something I know a great deal about. loadbalancer.conf # Puppet Load Balancing

Hi I''m getting this error with a 0.25.1 puppetmaster and 0.25.1 node. Nov 4 14:43:35 devcentos5 puppetd[26099]: (//network-config::base/File [hosts]) Failed to retrieve current state of resource: Error 400 on SERVER: Not authorized to call find on /file_metadata/network-config/ hosts/hosts.devcentos5 Could not retrieve file metadata for puppet:///network-config/hosts/hosts.devcentos5:

http://projects.puppetlabs.com/issues/7612 The exported resources syntax: @@user { luke: ensure => present } Is concise and powerful, but very difficult to read. We should consider word-based syntax, e.g.: export @user { luke: ensure => present } And taking into account #7605, perhaps: export virtual user { luke: ensure => present } Please comment on the ticket or reply

Hi, I''ve created two Nginx patches (see at the end of this message) to allow a simpler Nginx configuration for your Mongrel puppetmasters. The two main issues with Nginx in front of puppet were: * no CRL support * no optional certificate verification (and thus we''re forced to have two separate configs on two different ports, and to use --ca_port). Now, it is as simple as

I''m looking for a way to run more than one puppetmaster on the same server under passenger. Most of the puppet CPU load is waiting for the catalogs to compile. This also seems to be mostly what takes large amounts of RAM. I have storedconfigs on. I want to be able to move the fileserver to a different pool of puppetmaster processes. Is there an easy way to tell the client, either in

Hi, How do I force my Service declaration (with is defined elsewhere and inherited) is run after an exec has run? The code; class autofs_nis::services inherits services::base { Service[''ypbind''] { ensure => running, enable=> true, } ..... } class autofs_nis::exec inherits services::base { exec { "setdomainname": command

Hi, I''m using Amazon EC2 and I''m planning to use puppet to deploy automatically my instances, however, I have an issue I can''t rely think through. As most people advised, I used a DNS server (bind to be precise) so that my instances can register to it but also ask this DNS Server the IP of the puppetmaster. However, as this DNS server is also running on Amazon EC2

Hi, I''m writing puppet modules since a couple of weeks now, so I''m still considering myself as a new comer in this field. It seems that modules I can find on the web or the recipe page on the wiki almost all use a design pattern where the module is shipped in one or several class(es) whose configuration are determined by "global" or nodes variables ala: module: class

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello, at the moment I fight with puppetdoc and end in a ruby confusion. To the problem: > puppetdoc --debug --trace --mode rdoc --all manifests/site.pp info: scanning: ["manifests/site.pp"] /usr/lib/ruby/1.8/puppet/util/rdoc.rb:82:in `output_resource_doc'' /usr/lib/ruby/1.8/puppet/util/rdoc.rb:82:in `sort''

Hi, I''m looking to find a way to get the target filename inside a template. (e.g. if I have file {"/tmp/foo": content => template("foo")} I want to have a variable represent "/tmp/foo" inside the template. I''ve already tried using file, scope etc, but looking at the code, it doesn''t seems that i can access the filename inside the

I''m being a good boy and using the puppetdoc tool to document my classes, however I''m hitting a minor annoyance. The top level documentation for a module (let''s call it "example) is pulled from example/README (not example/manifests/init.pp), okay I can cope with that. The documentation for the class in example/manifests/init.pp ends up as example::example (hmm,

Hi everyone, I have a problem with my Puppet server, the server is overloaded and processes need to add half of my farm nodes yet! The server is hosted on a blade with the following characteristics: Processors: 8 cores Memory Ram: 12 Gb Operating System: Debian Squeeze Version of parcel: 2.7.1-1 ~ bpo60 puppet 1 puppet-common 2.7.1-1 ~ bpo60 1 2.7.1-1 ~ bpo60 1 puppetmaster puppetmaster 2.7.1-1 ~

Hi I''m quite new to the art of writing puppet manifest, but the more I see, the more I like it :-) I''m trying to write a djbdns dnscache module. dnscache configuration is spread in several files, for instance the ip addresses allowed to query the cache each have a file in dnscache/root/ip/ whose filename is the address. I''m trying to automate the creations of those

Hi all, Is there a more elegant way to regenerate the Puppet master certificate than what''s described in the CVE-2011-3872 toolkit? > If you can maintain a secondary shell session to the puppet master server, you can start a WEBrick master with puppet master --no-daemonize --verbose and stop it with ctrl-C. > If you prefer to only maintain one shell session, you can start a

Hi folks, When I enabled stored configs on my puppet master, it began keeping lots of open connections to the MySQL server (as far as I understand it opened one connection for each client run and never closed them). I set up the server to close idle connections after 5 minutes. Now the database server does close the connections but the puppet master keeps them in CLOSE_WAIT state and eventually

Sharing my stoopid mistake in the hopes of saving someone else the same grief: I had a boolean toggle that was not performing as expected. Long story short: I had put quotes around the word "false" class { ''foo'' : boolFlag => "false" } was coming up TRUE To fix it, lose the quotes class { ''foo'' : boolFlag => false } “Sometimes I

Hi, I''m sorry if that''s a FAQ, I also know exported resources are a still experimental. So my problem might well be a design limitation of how exported resources are working. My issue: I''m trying to export a file resource that is created by an exec block. The file is exported fine and collected fine but it is always empty on the other host. The puppet snippet: class

All, I was looking at the new feature of puppet to manage switches, and it says: "A current limitation is that it isn’t possible to have 2 switches with the same interface name" Does this mean that if one switch has an interface called FastEthernet 0/1, that puppet can''t manage a second switch with an interface called FastEthernet 0/1? If so, that probably means you can

Hi Everybody, I have 2 machines, one that running puppetmasterd and another one that running client. Both run Ubuntu. First I installed 2.25.4 (I think) version and then I have upgraded Puppet to 2.6.4 Server does not have any DNS entry, so I am trying to use IP address for the client to connect. Client generates some certificate error. root@puppet-client-ubuntu:~# puppetd --server

Hi, I''m still writing my djbdns module, I came to the following design issue with master and slave tinydns. Normally there is no such master and slave distinction in djbdns: all tinydns instance are equal. Usually one instance on one host is considered the master on, which the RR are changed, and when you need to propagate them, you rsync the datas to the other hosts, where they will be