On 18.01.2010 23:33, Scott Smith wrote:
On 1/18/10 1:11 PM, Forrie wrote:
Puppet docs require a PUPPET server name -- which I presumed a CNAME
would suffice.  However, I'm finding that's not the case - as the SSL
cert generated is for the actual system name pupptmasterd runs on
(makes sense).

The server that puppetmasterd is running on services other purposes,
and I don't want to call it puppet.  I'm wondering if this is simply
for cosmetic needs say, for new clients.

Use a DNS alias with no PTR or a CNAME. Also look at the certdnsnames parameter.

-scott
CNAME dns entries work with puppet. You must realize that they might not be as reliable, but they work. Make sure the value of server config parameter on the client is either equal to certname or in certdnsnames on the server. This also goes for the client on the server. Check http://docs.reductivelabs.com/references/stable/configuration.html for further details ;)



Silviu
-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.


Reply via email to