On 9/04/09 14:02, elementai wrote:
> Good day to you.
> 
> I've closely followed 
> http://reductivelabs.com/trac/puppet/wiki/UsingMongrelNginx
> 
> Everything is fine until i try puppetd --test on any node, which works
> when i use default Webrick.
> It fails and says :
> 
> # puppetd --test --server
> puppet.corbina.net
> info: Loading fact
> sshkeys
> info: Retrieving
> plugins
> err: Could not call fileserver.list: #<RuntimeError: HTTP-Error: 502
> Bad Gateway>
> err: /File[/var/lib/puppet/lib]: Failed to generate additional
> resources during transaction: HTTP-Error: 502
>  Bad
> Gateway
> 
> full log here : http://pastebin.com/f744fd3b9
> 
> On puppetmaster side  http://pastebin.com/m3e443d1c :
> 
> notice: Denying unauthenticated client localhost(127.0.0.1) access to
> fileserver.list
> /usr/lib64/ruby/site_ruby/1.8/puppet/network/xmlrpc/processor.rb:42:in
> `process'
> /usr/lib64/ruby/site_ruby/1.8/puppet/network/http_server/mongrel.rb:
> 111:in `process'
> ...<skip>
> Thu Apr 09 15:57:25 +0400 2009: Read error: #<XMLRPC::FaultException:
> Host localhost(127.0.0.1) not authoriz
> ed to call fileserver.list>
> /usr/lib64/ruby/site_ruby/1.8/puppet/network/xmlrpc/processor.rb:42:in
> `process'
> 
> All requests come from 127.0.0.1 , also adding 127.0.0.1 to
> namespaceauth.conf does not help.
> 
> puppetmaster runs on Gentoo
> nginx ( v0.6.32 ) config is here : http://pastebin.com/f53962d52
> /etc/puppet/puppet.conf ( v0.24.8 ) : http://pastebin.com/f7853ed1d

Do you have this puppetmasterd option set:
ssl_client_header = HTTP_X_SSL_SUBJECT

It is mandatory for mongrel.
-- 
Brice Figureau
Days of Wonder
http://www.daysofwonder.com

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to