Hey folks,

I have a puppetmaster (mongrel behind apache, 0.25.1), which is
serving several dozens clients just fine. Today I tried to add a new
client, and fired up puppetd to set up the SSL certificates, but the
client doesn't seem to be able to get a certificate:

  swan:/tmp# puppetd --no-daemonize --debug --onetime --waitforcert 30
  debug: Puppet::Type::User::ProviderDirectoryservice: file /usr/bin/dscl does 
not exist
  debug: Puppet::Type::User::ProviderPw: file pw does not exist
  debug: Puppet::Type::User::ProviderUser_role_add: file roleadd does not exist
  debug: Puppet::Type::User::ProviderLdap: true value when expecting false
  debug: Failed to load library 'ldap' for feature 'ldap'
  debug: /File[/var/lib/puppet/ssl/public_keys]: Autorequiring 
File[/var/lib/puppet/ssl]
  debug: /File[/var/lib/puppet/state]: Autorequiring File[/var/lib/puppet]
  debug: /File[/var/lib/puppet/client_yaml]: Autorequiring File[/var/lib/puppet]
  debug: /File[/var/lib/puppet/ssl/public_keys/swan.madduck.net.pem]: 
Autorequiring File[/var/lib/puppet/ssl/public_keys]
  debug: /File[/var/run/puppet/puppetd.pid]: Autorequiring File[/var/run/puppet]
  debug: /File[/etc/puppet/puppet.conf]: Autorequiring File[/etc/puppet]
  debug: /File[/var/lib/puppet/ssl/private]: Autorequiring 
File[/var/lib/puppet/ssl]
  debug: /File[/var/lib/puppet/clientbucket]: Autorequiring 
File[/var/lib/puppet]
  debug: /File[/var/lib/puppet/ssl/csr_swan.madduck.net.pem]: Autorequiring 
File[/var/lib/puppet/ssl]
  debug: /File[/var/lib/puppet/ssl]: Autorequiring File[/var/lib/puppet]
  debug: /File[/var/lib/puppet/ssl/private_keys]: Autorequiring 
File[/var/lib/puppet/ssl]
  debug: /File[/var/lib/puppet/ssl/private_keys/swan.madduck.net.pem]: 
Autorequiring File[/var/lib/puppet/ssl/private_keys]
  debug: /File[/var/lib/puppet/state/graphs]: Autorequiring 
File[/var/lib/puppet/state]
  debug: /File[/var/lib/puppet/ssl/certs/ca.pem]: Autorequiring 
File[/var/lib/puppet/ssl/certs]
  debug: /File[/var/lib/puppet/lib]: Autorequiring File[/var/lib/puppet]
  debug: /File[/var/lib/puppet/facts]: Autorequiring File[/var/lib/puppet]
  debug: /File[/var/lib/puppet/ssl/certs]: Autorequiring 
File[/var/lib/puppet/ssl]
  debug: /File[/var/lib/puppet/ssl/certificate_requests]: Autorequiring 
File[/var/lib/puppet/ssl]
  debug: Finishing transaction -614074518 with 0 changes
  debug: Using cached certificate for ca
  warning: peer certificate won't be verified in this SSL session
  debug: Using cached certificate_request for swan.madduck.net
  debug: Using cached certificate for ca
  warning: peer certificate won't be verified in this SSL session
  debug: Using cached certificate for ca
  warning: peer certificate won't be verified in this SSL session

The server sees the packets to port 8140 fine, and apache forwards
them on the load balancer. puppetmasterd sees them, but logs

  puppetmasterd[7369]: Could not resolve 80.68.90.58: Address family
  not supported by protocol - sendto(2)

80.68.90.58 is the client's IP, and it's a normal IPv4 IP, which the
server can ping and all that.

Any idea what's going on?

-- 
martin | http://madduck.net/ | http://two.sentenc.es/
 
"it is the customary fate of new truths
 to begin as heresies and to end as superstitions.
                                                      -- thomas huxley
 
spamtraps: madduck.bo...@madduck.net

Attachment: digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)

Reply via email to