[Puppet Users] Re: Could not write crontab for root: Invalid user: root

2008-11-18 Thread Bruno B
Those files are exactly the same before and after puppet. Same time, same checksum. I tried to run puppet just with cron instruction, same problem. On 18 nov, 17:43, martin <[EMAIL PROTECTED]> wrote: > A couple of questions: > 1) what does passwd look like before and after puppet > 2) what does

[Puppet Users] Re: puppet newbie

2008-11-18 Thread Crawford Kyle
On Nov 18, 2008, at 11:17 AM, Nigel Kersten wrote: > > On Mon, Nov 17, 2008 at 8:33 PM, Crawford Kyle <[EMAIL PROTECTED]> > wrote: >> >> >> On Nov 15, 2008, at 8:46 PM, Nigel Kersten wrote: >> >>> so I'm particularly interested to hear what the >>> major conceptual stumbling blocks were for ge

[Puppet Users] Re: onlyif functionality for the File type

2008-11-18 Thread michael
"Paul Lathrop" writes: >> Unfortunately, this leaves the seed file, required only for the command >> to run, lying around on disk. Now, I can protect the file with mode >> 0400, or I can tidy it with a dependency on the exec command, but what >> I really want is something like "refreshonly" for f

[Puppet Users] Re: onlyif functionality for the File type

2008-11-18 Thread Paul Lathrop
On Tue, Nov 18, 2008 at 5:22 PM, <[EMAIL PROTECTED]> wrote: > >>> - you want to install via a custom installer an application, so you >>> need to do the following: >>> 1. copy the file and installer over >>> 2. run installer and cleanup >> >>Well, myself I'd package the application in the nati

[Puppet Users] Re: onlyif functionality for the File type

2008-11-18 Thread michael
>> - you want to install via a custom installer an application, so you >> need to do the following: >> 1. copy the file and installer over >> 2. run installer and cleanup > >Well, myself I'd package the application in the native package format, >but I'm a bit crazy. Take another example, then.

[Puppet Users] Re: onlyif functionality for the File type

2008-11-18 Thread Paul Lathrop
On Mon, Nov 17, 2008 at 3:17 PM, Simon J Mudd <[EMAIL PROTECTED]> wrote: > [EMAIL PROTECTED] ("Paul Lathrop") writes: >> Still, I think you'll get more mileage out of telling us what problem >> you are trying to solve so we can help you figure out the best way to >> solve that problem within the P

[Puppet Users] Re: structure question / requirements

2008-11-18 Thread Paul Lathrop
On Mon, Nov 17, 2008 at 7:56 AM, Arnau Bria <[EMAIL PROTECTED]> wrote: > Is this correct? or is better to just include all *pp files in manifest > dir? It is a really good idea to start using modules from the very beginning. > My other question, is posible to add some "dependencies" between > im

[Puppet Users] Re: ldap nodes and authentication.

2008-11-18 Thread Leon Meßner
On Mon, Nov 17, 2008 at 05:23:21PM -0600, Luke Kanies wrote: > > On Nov 14, 2008, at 6:18 PM, Leon Meßner wrote: > > > Hi, > > i'm relatively new to puppet and to this list and have a problem > > configuring puppet for using ldap nodes. I have a very basic testing > > setup on FreeBSD7_0 using p

[Puppet Users] Re: Inter-device orchestration

2008-11-18 Thread Luke Kanies
(This is somewhat awkwardly on both lists; is everyone ok moving it to -dev?) On Nov 18, 2008, at 6:48 AM, Ceri Storey wrote: > [snipped description of state-based change control] > I suppose what I'm asking, is firstly, is anyone else doing anything > like this themselves? I imagine someone mu

[Puppet Users] Re: deleting users secondary groups

2008-11-18 Thread Dave Nash
I tried it on a whim and I had to have the groups option set for the user even if I didn't want him to belong to groups beyond his primary group. So I did something like this. user { "arnaubria": ensure => present, gid=> "31401", home => "/nfs/pic.es/user/a/a

[Puppet Users] Re: External_nodes definition not working. Client states "could not find node"

2008-11-18 Thread Eric Moore
"Kurt Bendlin" <[EMAIL PROTECTED]> writes: > Funny. Using the following script from the > wiki(http://reductivelabs.com/trac/puppet/wiki/ExternalNodes): > > #!/bin/sh > # Super-simple external_node script for versions 0.23 and later > cat <<"END" > --- > classes: > - basesystem > parameters:

[Puppet Users] Re: Could not write crontab for root: Invalid user: root

2008-11-18 Thread martin
A couple of questions: 1) what does passwd look like before and after puppet 2) what does pam.conf look like before and after puppet? (in the zone) cheers, /Martin On Nov 17, 2:35 pm, Bruno B <[EMAIL PROTECTED]> wrote: > I'm not using LDAP or NIS. The users are managed with /etc/passwd > file. >

[Puppet Users] Re: puppet newbie

2008-11-18 Thread Nigel Kersten
On Mon, Nov 17, 2008 at 8:33 PM, Crawford Kyle <[EMAIL PROTECTED]> wrote: > > > On Nov 15, 2008, at 8:46 PM, Nigel Kersten wrote: > >> so I'm particularly interested to hear what the >> major conceptual stumbling blocks were for getting started so that we >> make sure we're smoothing that path out

[Puppet Users] Re: deleting users secondary groups

2008-11-18 Thread Arnau Bria
On Wed, 19 Nov 2008 00:27:24 +1300 Aj Aj wrote: > > You'll want to use the membership parameter to achieve this, check > the type ref. I've done. But I don't know how membership could help me I've tried with both values: inclusive, minimum. user { "arnaubria": ensure => present,

[Puppet Users] Re: Inter-device orchestration

2008-11-18 Thread Thomas Bellman
Ceri Storey wrote: > The problem therefore, is that currently, puppet can only say "Make X > look like Y", not "While doing A make X look like Y and otherwise Z". > So we could say something like: > > loadbalancer { $ipaddress: ensure => enabled } > semaphore { $cluster_name: ensure => none } >

[Puppet Users] Re: External_nodes definition not working. Client states "could not find node"

2008-11-18 Thread Kurt Bendlin
Funny. Using the following script from the wiki(http://reductivelabs.com/trac/puppet/wiki/ExternalNodes): #!/bin/sh # Super-simple external_node script for versions 0.23 and later cat <<"END" --- classes: - basesystem parameters: puppet_server: puppet.example.com dns_server: ns.example.co

[Puppet Users] Re: Inter-device orchestration

2008-11-18 Thread James Turnbull
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ceri Storey wrote: > For some background, we're essentially using puppet in much the same > way you would use the ssh-and-a-for-loop method. I know it's well, > fundamentally missing the point, but the thing is, there are a few > constraints that we'r

[Puppet Users] Inter-device orchestration

2008-11-18 Thread Ceri Storey
Hi all. For some background, we're essentially using puppet in much the same way you would use the ssh-and-a-for-loop method. I know it's well, fundamentally missing the point, but the thing is, there are a few constraints that we're currently otherwise unable to satisfy. Essentailly, we have a

[Puppet Users] custom gem provider

2008-11-18 Thread gary
Hello, I'm hoping someone can help out. :) Our rails deployment uses a custom compiled ruby. The app runs under a certain named rails. So in trying to be able to manage it's gems, I tried creating a custom provider. I took the default gem provider and modified it like this: commands :gemcmd

[Puppet Users] Re: deleting users secondary groups

2008-11-18 Thread Aj
You'll want to use the membership parameter to achieve this, check the type ref. Regards, Aj On 18/11/2008, at 9:57 PM, Arnau Bria <[EMAIL PROTECTED]> wrote: > > On Mon, 17 Nov 2008 17:24:27 -0600 > Luke Kanies wrote: > Hi Luke, > >>> Is delete / recreate the only solution? >> >> What do you

[Puppet Users] Re: file / notify / exec / subscribe

2008-11-18 Thread Arnau Bria
On Tue, 18 Nov 2008 11:32:32 +0100 Thomas Bellman wrote: > > Arnau Bria wrote: > > > In the example I have notify and subscribe, but I've been playing > > with only one, with only the other and both, and ALWAYS exec > > "yaim_conf" is executed. > > You are missing the refreshonly parameter to

[Puppet Users] Re: file / notify / exec / subscribe

2008-11-18 Thread Arnau Bria
On Tue, 18 Nov 2008 11:22:40 +0100 Peter Meier wrote: > > Hi [...] > it does. However exec execs every time puppet runs, unless you specify > certain conditions. Like unless, onlyif or refreshonly. Ok, I tried to define a unless condition, but I had no good ideas for that (it's not as easy as r

[Puppet Users] Re: file / notify / exec / subscribe

2008-11-18 Thread Thomas Bellman
Arnau Bria wrote: > In the example I have notify and subscribe, but I've been playing with > only one, with only the other and both, and ALWAYS exec "yaim_conf" is > executed. You are missing the refreshonly parameter to the exec type. (Nice to see other LCG sites using Puppet, by the way. :-)

[Puppet Users] Re: file / notify / exec / subscribe

2008-11-18 Thread Peter Meier
Hi > [...] > One or more objects that this object depends on. Changes in the subscribed to > objects result in the dependent objects being refreshed (e.g., a service will > get restarted). For instance: > [...] > Currently the exec, mount and service type support refreshing. > > SO exec should

[Puppet Users] file / notify / exec / subscribe

2008-11-18 Thread Arnau Bria
Hi all, Hi have something like: file { "/opt/localconf/gLite3.1/yaim": ensure => directory, recurse => "true", owner => "root", group => "root", mode=> "755", source => "puppet://gri

[Puppet Users] Re: deleting users secondary groups

2008-11-18 Thread Arnau Bria
On Mon, 17 Nov 2008 17:24:27 -0600 Luke Kanies wrote: Hi Luke, > > Is delete / recreate the only solution? > > What do you mean? # id arnaubria uid=63003(arnaubria) gid=31401(grid) groups=31401(grid) user { "arnaubria": ensure=> present, gid => "31401", home

[Puppet Users] Re: puppetca and openvpn ...

2008-11-18 Thread James Turnbull
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ben wrote: > Has anyone attempted to get openvpn to work with puppets certificates? > You shouldn't have any issues. Puppet uses standard OpenSSL. A recipe showing your configuration for the wiki would be great though. *hint*. Regards James Turn

[Puppet Users] puppetca and openvpn ...

2008-11-18 Thread Ben
Has anyone attempted to get openvpn to work with puppets certificates? I am thinking that it should work without to much fuss. My current openvpn implementation uses the following certificates and beside these are what i think would be the appropriate puppet ones. openvpn server: ca /etc/openv