Hey folks, I have a puppetmaster (mongrel behind apache, 0.25.1), which is serving several dozens clients just fine. Today I tried to add a new client, and fired up puppetd to set up the SSL certificates, but the client doesn't seem to be able to get a certificate:
swan:/tmp# puppetd --no-daemonize --debug --onetime --waitforcert 30 debug: Puppet::Type::User::ProviderDirectoryservice: file /usr/bin/dscl does not exist debug: Puppet::Type::User::ProviderPw: file pw does not exist debug: Puppet::Type::User::ProviderUser_role_add: file roleadd does not exist debug: Puppet::Type::User::ProviderLdap: true value when expecting false debug: Failed to load library 'ldap' for feature 'ldap' debug: /File[/var/lib/puppet/ssl/public_keys]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/state]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/client_yaml]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/ssl/public_keys/swan.madduck.net.pem]: Autorequiring File[/var/lib/puppet/ssl/public_keys] debug: /File[/var/run/puppet/puppetd.pid]: Autorequiring File[/var/run/puppet] debug: /File[/etc/puppet/puppet.conf]: Autorequiring File[/etc/puppet] debug: /File[/var/lib/puppet/ssl/private]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/clientbucket]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/ssl/csr_swan.madduck.net.pem]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/ssl]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/ssl/private_keys]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/ssl/private_keys/swan.madduck.net.pem]: Autorequiring File[/var/lib/puppet/ssl/private_keys] debug: /File[/var/lib/puppet/state/graphs]: Autorequiring File[/var/lib/puppet/state] debug: /File[/var/lib/puppet/ssl/certs/ca.pem]: Autorequiring File[/var/lib/puppet/ssl/certs] debug: /File[/var/lib/puppet/lib]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/facts]: Autorequiring File[/var/lib/puppet] debug: /File[/var/lib/puppet/ssl/certs]: Autorequiring File[/var/lib/puppet/ssl] debug: /File[/var/lib/puppet/ssl/certificate_requests]: Autorequiring File[/var/lib/puppet/ssl] debug: Finishing transaction -614074518 with 0 changes debug: Using cached certificate for ca warning: peer certificate won't be verified in this SSL session debug: Using cached certificate_request for swan.madduck.net debug: Using cached certificate for ca warning: peer certificate won't be verified in this SSL session debug: Using cached certificate for ca warning: peer certificate won't be verified in this SSL session The server sees the packets to port 8140 fine, and apache forwards them on the load balancer. puppetmasterd sees them, but logs puppetmasterd[7369]: Could not resolve 80.68.90.58: Address family not supported by protocol - sendto(2) 80.68.90.58 is the client's IP, and it's a normal IPv4 IP, which the server can ping and all that. Any idea what's going on? -- martin | http://madduck.net/ | http://two.sentenc.es/ "it is the customary fate of new truths to begin as heresies and to end as superstitions. -- thomas huxley spamtraps: madduck.bo...@madduck.net
digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)