No. Only one puppet master. On Wednesday, March 19, 2014 7:56:23 AM UTC-7, Jesse Throwe wrote: > > Steve, > > Do you, perchance, have multiple puppet masters in play? > > On Wed, Mar 19, 2014 at 9:58 AM, jcbollinger > <john.bo...@stjude.org<javascript:>> > wrote: > > > > > > On Tuesday, March 18, 2014 10:25:02 AM UTC-5, st...@wtfast.com wrote: > >> > >> These are not new nodes but not old either, only a few months. The > >> date/time is correct. The DNS is correct. I have not manually set > >> certificate lifetimes to be shorter than the default. However sometimes > >> these nodes might not check in for a few days. > >> > >> This was recently a big problem as the cert for the puppetdb server was > >> revoked. > >> > >> How can I get more information about the revocation? > >> > > > > > > You could start by giving us more information. Specifically, the actual > > messages that lead you to conclude that certificates have been revoked. > > > > You could also look at the Puppet CA's data files in > /var/lib/puppet/ssl/ca, > > or something like that. The inventory of current certificates and the > CRL > > should both be there. > > > > > > Is there any chance that your nodes' timekeeping is inconsistent? That > can > > happen with VMs, for instance. If your nodes do not agree fairly > closely > > with the master with respect to the current date and time of day then > that > > can prevent successful SSL handshaking. > > > > > > John > > > > -- > > You received this message because you are subscribed to the Google > Groups > > "Puppet Users" group. > > To unsubscribe from this group and stop receiving emails from it, send > an > > email to puppet-users...@googlegroups.com <javascript:>. > > To view this discussion on the web visit > > > https://groups.google.com/d/msgid/puppet-users/40e1eea2-50c5-435a-adcd-b6d6b3ce1912%40googlegroups.com. > > > > > > For more options, visit https://groups.google.com/d/optout. >
-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/97ac818a-b9c6-42ae-8d4f-b1646138803a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
