Hi,

On 14/08/10 00:18, Yushu Yao wrote:
> I'm trying to run puppet via passenger _ apache2 on ubuntu 10.04 64bit
> and it refuse to work with an error:
> 
> /*err: Could not retrieve catalog from remote server: Error 403 on
> SERVER: Forbidden request: 192.168.2.3(192.168.2.3) access to
> /certificate_revocation_list/ca [find] at line 93*/
> 
[snipped]
> /*cat /etc/puppet/puppet.conf*/
> [main]
>     pluginsync = true
> 
> [puppetmasterd]
>     confdir=/opt/cloudcrv/puppet
>     vardir=/opt/cloudcrv/varpuppet
>     ssldir = $vardir/ssl
>     user = cloudcrv

I'm no passenger expert (I even don't use it), but it looks like you are
missing the following two important variables:
ssl_client_header = SSL_CLIENT_S_DN
ssl_client_verify_header = SSL_CLIENT_VERIFY

>     # The Puppet log directory.
>     # The default value is '$vardir/log'.
>     logdir = $vardir/log
> 
>     # Where Puppet PID files are kept.
>     # The default value is '$vardir/run'.
>     rundir = $vardir/run
> 
>     # Where SSL certificates are kept.
>     # The default value is '$confdir/ssl'.
>     ssldir = $vardir/ssl
> 
>     rails_loglevel = debug

Do not run in production with rails_loglevel at debug, it will dump a
lot of things to the rails log (ie all SQL requests sent), and certainly
will slow down your master.
-- 
Brice Figureau
My Blog: http://www.masterzen.fr/

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to