I have gone little further nowwhat I have done is to delete the ssl folder
from one of the client and ran this command on server: puppetca --clean
clientname
it has generated new certificate but in the end I get the same error:
err: Could not call revoke: Cannot convert into OpenSSL::BN
Further more when i restart the agent from the client now I get this
message under server message log: client has a waiting certificate request
Under my client message log:
hostname  puppet-agent[13385]: Did not receive certificate



On Fri, Dec 30, 2011 at 7:36 AM, Mohammad Khan <makhan...@gmail.com> wrote:

> I have tried to deleted the ssl folder under puppet. And then tried to
> clean the certificate from the server but did not work.
> #puppetca --clean hostname
> notice: Revoked certificate with serial # Inventory of signed certificates
> # SERIAL NOT_BEFORE NOT_AFTER SUBJECT
>
>
> err:  Could not call revoke: Cannot convert into OpenSSL::BN
>
>
>
> On Fri, Dec 30, 2011 at 7:23 AM, Mohammad Khan <makhan...@gmail.com>wrote:
>
>> Thanks guys; I am getting closer but still some errors. I am getting
>> these errors now.
>>  Starting Puppet client version 2.6.12
>> Dec 30 07:20:40 puppet puppet-agent[19918]: Could not retrieve catalog
>> from remote server: Retrieved certificate does not match private key;
>> please remove certificate from server and regenerate it with the current key
>> Dec 30 07:20:40 server puppet-agent[19918]: Using cached catalog
>> Dec 30 07:20:40 server puppet-agent[19918]: Could not retrieve catalog;
>> skipping run
>>
>>
>>
>>
>> On Fri, Dec 30, 2011 at 2:31 AM, Bernd Adamowicz <
>> bernd.adamow...@esailors.de> wrote:
>>
>>> I'm pretty sure that, besides the other answers already provided, your
>>> main problem is the wrong user for your Puppet configuration. It should be
>>> user 'puppet' and not 'root'. That's how '/etc/puppet' should look like:
>>>
>>> drwxr-xr-x  5 puppet puppet 4.0K Dec 12 17:48 .
>>> drwxr-xr-x 79 root   root    12K Dec 26 04:03 ..
>>> -rw-r--r--  1 puppet puppet 3.1K Dec 12 17:48 auth.conf
>>> drwxr-xr-x  6 puppet puppet 4.0K Dec 12 17:48 environments
>>> drwxr-xr-x  3 puppet puppet 4.0K Dec 12 17:48 manifests
>>> -rw-r--r--  1 puppet puppet  838 Dec 12 17:48 namespaceauth.conf
>>> -rw-r--r--  1 puppet puppet 1.8K Dec 12 17:48 puppet.conf
>>> drwxr-xr-x  6 puppet puppet 4.0K Dec 30 08:20 .svn
>>>
>>> So a command like 'chown -R puppet:puppet /etc/puppet' issued as 'root'
>>> should solve your main problem which is the 'Permission denied' error as
>>> well as the non starting Puppet process.
>>>
>>> Bernd
>>>
>>> > -----Ursprüngliche Nachricht-----
>>> > Von: puppet-users@googlegroups.com [mailto:puppet-
>>> > us...@googlegroups.com] Im Auftrag von Khan
>>> > Gesendet: Donnerstag, 29. Dezember 2011 17:37
>>> > An: Puppet Users
>>> > Betreff: [Puppet Users] Puppetserver error
>>> >
>>> > Hello everyone,
>>> > I am new to puppet. I have installed on redhat Enterprise 5and seems
>>> > to be working fine. Couple days ago I was testing some permissions on /
>>> > etc folder and applied 600 /etc and sub folders. Although I have
>>> > reverted the permission but I am having issues on puppetmaster.
>>> > Currently I have these permission on etc 755 and puppet folder:
>>> > my /etc folder is 755 and puppet folder with tese permsions:
>>> >
>>> > -rw-r--r--  1 root root 2346 May  8  2010 auth.conf
>>> > -rw-r--r--  1 root root  419 May 19  2010 fileserver.conf
>>> > drwxr-xr-x  3 root root 4096 Dec 23 10:48 manifests
>>> > drwxr-xr-x 21 root root 4096 Oct 22  2010 modules
>>> > -rw-r--r--  1 root root  980 May 27  2010 puppet.conf
>>> > -rw-r--r--  1 root root  855 May 17  2010 puppet.conf.rpmnew
>>> >
>>> > I am getting these error in the log:
>>> >
>>> > puppet-master[3519]: Could not parse for environment production:
>>> > Permission denied - /etc/puppet/manifests/classes/sysctl.pp at /etc/
>>> > puppet/manifests/site.pp:3 on node client1
>>> >
>>> > Dec 27 14:25:46 server puppet-master[3519]: Could not parse for
>>> > environment production: Permission denied - /etc/puppet/manifests/
>>> > classes/sysctl.pp at /etc/puppet/manifests/site.pp:3 on node client2
>>> >
>>> > Dec 27 14:27:15 server puppet-master[3519]: Could not parse for
>>> > environment production: Permission denied - /etc/puppet/manifests/
>>> > classes/sysctl.pp at /etc/puppet/manifests/site.pp:3 on node client3
>>> >
>>> > Dec 27 14:27:15 server  puppet-master[3519]: Could not parse for
>>> > environment production: Permission denied - /etc/puppet/manifests/
>>> > classes/sysctl.pp at /etc/puppet/manifests/site.pp:3 on node client4
>>> >
>>> > Dec 27 14:27:15 server puppet-agent[10407]: Could not retrieve catalog
>>> > from remote server: Error 400 on SERVER: Could not parse for
>>> > environment production: Permission denied - /etc/puppet/manifests/
>>> > classes/sysctl.pp at /etc/puppet/manifests/site.pp:3 on node server
>>> > Any Help will be greatly appreciated.
>>> >
>>> > --
>>> > You received this message because you are subscribed to the Google
>>> > Groups "Puppet Users" group.
>>> > To post to this group, send email to puppet-users@googlegroups.com.
>>> > To unsubscribe from this group, send email to puppet-
>>> > users+unsubscr...@googlegroups.com.
>>> > For more options, visit this group at
>>> > http://groups.google.com/group/puppet-users?hl=en.
>>>
>>> --
>>> You received this message because you are subscribed to the Google
>>> Groups "Puppet Users" group.
>>> To post to this group, send email to puppet-users@googlegroups.com.
>>> To unsubscribe from this group, send email to
>>> puppet-users+unsubscr...@googlegroups.com.
>>> For more options, visit this group at
>>> http://groups.google.com/group/puppet-users?hl=en.
>>>
>>>
>>
>>
>> --
>> Regards,
>> Mohammad
>>
>>
>
>
> --
> Regards,
> Mohammad
>
>


-- 
Regards,
Mohammad

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to