Hi,

> On 22. Aug 2019, at 08:02, Zhang Zhao <zhang.alex.z...@gmail.com> wrote:
> 
> Hi, 
> I am new to Puppet. Trying to set up a test environment. But the agent could 
> not request a certificate as connection refused. I made sure that puppet 
> server was running and service was enabled. Anyone can let me know where was 
> wrong? Thanks.

Is there a local firewall (iptables) running on the master?
You can temporarily flush the rules:
sudo iptables -F

If a local firewall is running, you want to open port 8140/tcp for incoming 
connections.

Best,
Martin


> 
> Zhang
> 
> On PuppetMaster, 
> [root@puppetmaster ~]# puppet resource service puppetserver ensure=running 
> enable=true
> service { 'puppetserver':
>   ensure => 'running',
>   enable => 'true',
> }
> 
> [root@puppetmaster ~]# netstat -ntlp
> Active Internet connections (only servers)
> Proto Recv-Q Send-Q Local Address           Foreign Address         State     
>   PID/Program name    
> tcp        0      0 0.0.0.0:111             0.0.0.0:*               LISTEN    
>   1/systemd           
> tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN    
>   2469/sshd           
> tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN    
>   2694/master         
> tcp6       0      0 :::8140                 :::*                    LISTEN    
>   27805/java          
> tcp6       0      0 :::111                  :::*                    LISTEN    
>   1/systemd           
> tcp6       0      0 :::22                   :::*                    LISTEN    
>   2469/sshd           
> tcp6       0      0 ::1:25                  :::*                    LISTEN    
>   2694/master
> 
> 
> [root@puppetmaster ~]# puppet cert list --all
> Warning: `puppet cert` is deprecated and will be removed in a future release.
>    (location: 
> /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application.rb:370:in 
> `run')
> + "puppetmaster.attlocal.net <http://puppetmaster.attlocal.net/>" (SHA256) 
> 10:A5:A4:7D:9E:10:D1:14:C3:92:D2:CE:B4:7E:78:C5:C4:26:56:DA:0D:7B:4E:0B:D5:58:B4:1E:43:03:F4:9E
>  (alt names: "DNS:puppet", "DNS:puppetmaster.attlocal.net 
> <http://puppetmaster.attlocal.net/>")
> 
> -- 
> You received this message because you are subscribed to the Google Groups 
> "Puppet Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to puppet-users+unsubscr...@googlegroups.com 
> <mailto:puppet-users+unsubscr...@googlegroups.com>.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/puppet-users/688ccd6f-00a8-4f28-9683-d7a4424bacf3%40googlegroups.com
>  
> <https://groups.google.com/d/msgid/puppet-users/688ccd6f-00a8-4f28-9683-d7a4424bacf3%40googlegroups.com?utm_medium=email&utm_source=footer>.

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/5A7FEB43-1979-4A35-BF22-595752604F6D%40gmail.com.

Reply via email to