Hi, On Fri, Jan 15, 2010 at 10:52 PM, Alex Peters <alex.pet...@gmail.com> wrote:
> On Jan 16, 3:28 pm, Dan Bode <d...@reductivelabs.com> wrote: > > there is an option that you can use to specify that a server should > accept > > incoming request from multiple dns names > > Thanks for your response, Dan. The configuration item you mentioned > seems to be part of what I need. This and further Googling got me to > this configuration: > > [puppetmasterd] > certname=XYZ.ath.cx > this sets the actual name of the cert for the server, the certs would need to be wiped out for this to have any effect (by default this is set to `hostname`) you can see cert creation when running the puppetmasterd at --verbose > certdnsnames=puppet:puppet.kp113.lan:europa:europa.kp113.lan:XYZ.ath.cx > > this set the allows names for connection. > I'm not sure how much of that is necessary; I seemed to get > certificate errors at the remote client end until I added the > "certname" line, and when I had the "certdnsnames" line at just > "puppet:XYZ.ath.cx" the client on this LAN wasn't happy (even though > Puppet's docs say certdnsnames=puppet if not otherwise specified). If > this is too verbose, please let me know. > you can always use --configprint to check the current option settings of any executable. To test the default for dnscertname, you could uncomment the option from the puppet.conf and run: puppetmasterd --configprint certdnsnames just a helpful tip because there are almost 1000 config parmas with 1000 default settings :) > > I get occasional warnings on the master side like this: > > "Could not find facts for XYZ; you probably have a discrepancy between > the node and fact names" > > It looks like this would be triggered when the server host checks in as a client (with puppetd). run puppetd --test on the client and verify that the output is triggered from this. > It might be related, but it's also sporadic so who knows... :) > > Cheers, > Alex > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To post to this group, send email to puppet-us...@googlegroups.com. > To unsubscribe from this group, send email to > puppet-users+unsubscr...@googlegroups.com<puppet-users%2bunsubscr...@googlegroups.com> > . > For more options, visit this group at > http://groups.google.com/group/puppet-users?hl=en. > > > > hope that help, Dan worker bee ReductiveLabs--
You received this message because you are subscribed to the Google Groups "Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
