Yes, its possible :)
but that would mean a CA chain, and eventually that each client can query
all puppetmasters (which I'm not sure this is what you are looking for in).
maybe setup a different puppet.conf for your puppet master clients (With a
different ssl directory etc?)
Ohad
On Wed, Sep 9, 2009 at 12:24 AM, Keith Edmunds <k...@midnighthax.com> wrote:
>
> Is is possible to have a puppetmaster that is a client of a different
> puppetmaster? We manage our customers' server via puppet, but one customer
> has a puppetmaster server which looks after their internal systems. We've
> tried the following in /etc/puppet/puppet.conf ("customer" and "us"
> replacing the domain names) on their puppetmaster:
>
> [puppetmasterd]
> certname = puppetmaster.customer.com
> templatedir=/var/lib/puppet/templates
>
> [puppetd]
> server = puppetmaster.us.com
> certname = puppetmaster.us.com
>
> When we run "puppetd -t" on that server, we get:
>
> # puppetd -t
>
> warning: Certificate validation failed; consider using the certname
> configuration option
>
> err: Could not retrieve catalog: Certificates were not trusted:
> SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B:
> certificate verify failed
>
> warning: Not using cache on failed catalog
>
> Is there a way around this?
>
> Thanks,
> Keith
>
> >
>
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---
