On Sunday, February 22, 2015 at 10:31:53 PM UTC-6, Tejas Gadaria wrote: > > Hi, > > Thanks for reply, > > I tried this also, but issue was there. > > Though master and agent had same time, I sync both with my time server, & > it worked. > > Just for information, how much time difference (would be in millisecond) > is acceptable between agent and master >
I don't know specifically, but your question supposes the wrong scale. In my experience, a skew of at least a few tens of seconds is accepted. In principle, this is under the control of the party performing certificate validation, but Puppet does not expose it as a configuration parameter. One thing to watch out for is that the time of day on each machine is correct *for the time zone set on that machine*. Machines in different time zones are not inherently a problem, as long as time matches time zone. However, if (say) a machine is configured with the wrong time zone for its geographic locality, but the correct local time for that locality, then that constitutes enough skew relative to the true time to make SSL certification validation fail. John -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/19901edb-c924-42c3-b7b6-757bbc1f788a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
