On Jan 28, 2011, at 2:02 PM, Daniel Pittman wrote:
> Yes.  On the other hand, you will very quickly run into a problem:
> 
> The puppet master uses the name in the SSL certificate that the client
> supplies as the "node" identifier.  So, if you use that wildcard for
> your nodes you will not be able to uniquely identify them.  You would
> have to have the same manifest on all of them, or reinvent all the
> distinctions that puppet already makes.

I thought someone pointed out (when I went on one of my rants about the SSL/CA 
stuff in puppet) that there's a configuration-option to tell the puppetmaster 
to use the $fqdn fact as the nodename instead?

So it shouldn't be THAT hard, if it's just a config-option.

D

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to