[Puppet Users] Re: Solaris SSL error

2009-02-09 Thread chakkerz
Valid point, unfortunately, i configured this: r...@puppetsun:/opt/csw/bin# cat /opt/csw/etc/puppet/puppet.conf [main] vardir = /var/lib/puppet logdir = /var/log/puppet rundir = /var/run/puppet ssldir = $vardir/ssl pluginsync = true factpath = $vardi

[Puppet Users] Re: puppet + mongrel + host_cert/key owner

2009-02-09 Thread Ohad Levy
note that SSLCARevocationFile doesnt work, you would not be able to use your puppetd aginst your puppetmaster (if its the same machine). On Tue, Feb 10, 2009 at 12:22 AM, Arnau Bria wrote: > > Hi all, > > following http://reductivelabs.com/trac/puppet/wiki/UsingMongrel it > says that hostkey/ce

[Puppet Users] Re: Solaris SSL error

2009-02-09 Thread Ohad Levy
If you used the Solaris blastwave packages, it might be that your certs are in a different directory... check your puppet configs for where your ssl dir is (could be /etc/puppet/ssl, /var/lib/puppet/ssl, /opt/csw/etc/puppet/ssl .) Cheers, Ohad On Tue, Feb 10, 2009 at 6:29 AM, chakkerz wrote

[Puppet Users] Portland, OR Puppet User Meetup.

2009-02-09 Thread Teyo Tyree
Hello, Any Puppet users located in Portland, OR interested in forming a local Puppet users group? I am in the process of relocating to Portland and would love to help build a strong local community. I'll be in Portland until March 8th and would love to have a meet up in the next few weeks. Chee

[Puppet Users] Re: Best practices question

2009-02-09 Thread Felix Schäfer
Hello, Am 10.02.2009 um 00:34 schrieb Eric Gerlach: > If I want to configure a file, say /etc/network interfaces, on all > of my Debian boxes, should I put the resource definition in: > > a) manifests/classes/debian.pp > b) modules/debian/manifests/init.pp > > I guess I'm asking whether people

[Puppet Users] Re: Best practices question

2009-02-09 Thread Larry Ludwig
Sorry $operatingsystem not $lsbdistid for the variable. -L On Feb 9, 6:54 pm, Larry Ludwig wrote: > Hi Eric, > > I tend to think of modules as a method to encapsulate a package or > even larger service.  If you needed to develop for a specific OS you > could break down into seperate classes. >

[Puppet Users] Re: Best practices question

2009-02-09 Thread Larry Ludwig
Hi Eric, I tend to think of modules as a method to encapsulate a package or even larger service. If you needed to develop for a specific OS you could break down into seperate classes. If you created a module named "network" it could be more generic and apply to other OSes. ie: class network {

[Puppet Users] Re: Best practices question

2009-02-09 Thread Mike Renfro
On 2/9/2009 5:34 PM, Eric Gerlach wrote: > If I want to configure a file, say /etc/network interfaces, on all of > my Debian boxes, should I put the resource definition in: > > a) manifests/classes/debian.pp > b) modules/debian/manifests/init.pp > > I guess I'm asking whether people here have c

[Puppet Users] Best practices question

2009-02-09 Thread Eric Gerlach
Hi, I'm slowly building Puppet into our infrastructure, and it's quite fun. I have a question about best practices though. If I want to configure a file, say /etc/network interfaces, on all of my Debian boxes, should I put the resource definition in: a) manifests/classes/debian.pp b) modules/

[Puppet Users] Re: shorewall module

2009-02-09 Thread Scott Beardsley
bump... ideas? On Thu, Feb 5, 2009 at 9:25 AM, Scott Beardsley wrote: >>> [4] https://git.puppet.immerda.ch/?p=module-shorewall;a=summary >> >> as I'm involved in 1,2 and 4 I try to answer: >> 1 and 4 should be nearly identical, 1 is more or less just a mirror of 4. >> However 4 is the one which

[Puppet Users] Re: Problem with some of my puppet clients running

2009-02-09 Thread Ryan
Hi Steven, I ran into the same problem this morning when rolling some new facter/ puppet packages for RHEL4. Going back to facter 1.5.2 seems to be a usable workaround at the moment. -ryan On Feb 5, 10:48 am, "Steven Nemetz" wrote: > > On Feb 4, 2009, at 6:49 PM, Steven Nemetz wrote: > > > >

[Puppet Users] Re: Solaris SSL error

2009-02-09 Thread chakkerz
Ok, i've re-read http://reductivelabs.com/trac/puppet/wiki/CertificatesAndSecurity and some things fell into place (though it still doesn't work :) ) So the CA here is my host puppetbeta which is the master. On it i signed the cert that the puppetsun generated when i ran `puppetd -- test` , usin

[Puppet Users] Re: Solaris SSL error

2009-02-09 Thread chakkerz
But that doesn't make sense ... So what you're saying that the Solaris host (all the RedHat ones are working), will need to have their cert's generated on a RedHat box, and then transferred to the solaris host? But even then the architecture doesn't make sense, because i'm using a self signed ce

[Puppet Users] Re: compiled catalog for $HOST time

2009-02-09 Thread Larry Ludwig
On Feb 9, 1:31 pm, Paul Lathrop wrote: > Are you using stored configs? > Also what version of the puppetmaster? -L --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send

[Puppet Users] Re: compiled catalog for $HOST time

2009-02-09 Thread Paul Lathrop
Are you using stored configs? On Mon, Feb 9, 2009 at 2:54 AM, Arnau Bria wrote: > > Hi, > > anyone could explain why every time that puppet compiles a catalog for a > host, its compilation time increases? > > Hosts share same "type", so, from my understanding, compiling catalog > time should dec

[Puppet Users] Re: Doesn't run after upgrade

2009-02-09 Thread Mike Renfro
On 2/9/2009 11:05 AM, s...@imperial.ac.uk wrote: > Hi > I am running Debian 4.0. > I have updated my system from v 0.20. > > Updated Ruby then checked libraries openssl, xmlrpc -all OK > but ruby --vesion gives 1.8.5 not 1.8.7 which I was expecting! Here's relevant output from my working puppetm

[Puppet Users] Re: Problem with some of my puppet clients running

2009-02-09 Thread Steven Nemetz
> -Original Message- > > What about if you run Facter with --puppet, making sure it loads your > custom facts? > > -- > Due to circumstances beyond your control, you are master of your fate > and captain of your soul. > --

[Puppet Users] Re: what about kinial ?

2009-02-09 Thread Paul Lathrop
On Mon, Feb 9, 2009 at 9:24 AM, nicolas wrote: > > >> >> Maybe there is something I missed about definitions. I though it was >> a notion related to the notion of a class. >> I'm confused too, because your answer make me think that you >> consider definition call like resources. Is it the cas

[Puppet Users] Reductive Labs Puppet Survey: last day to participate is Feb 13th, 2009.

2009-02-09 Thread Teyo Tyree
Hello, So far, the response to the survey has been outstanding. Thanks for taking the time to complete the survey. For those of you that have not yet taken the survey, we will be closing it at 24:00 CST, February 13th, 2009. This is an opportunity for you to let us know what you think about Pup

[Puppet Users] Re: what about kinial ?

2009-02-09 Thread nicolas
> >   Maybe there is something I missed about definitions. I though it was > a notion related to the notion of a class. >   I'm confused too, because your answer make me think that you > consider definition call like resources. Is it the case ? > >   My only request was to be able to put paramete

[Puppet Users] Doesn't run after upgrade

2009-02-09 Thread s...@imperial.ac.uk
Hi I am running Debian 4.0. I have updated my system from v 0.20. Updated Ruby then checked libraries openssl, xmlrpc -all OK but ruby --vesion gives 1.8.5 not 1.8.7 which I was expecting! Did the LDAP validation as per the wiki -all OK Installed puppet v 0.27.7 Puppermaster wouldn't start.

[Puppet Users] Re: Puppet && OMA-DM interoperability

2009-02-09 Thread Tom D. Davidson
> The payload for the configuration stage is the result of compilation, > and is data-only (no variables, no functions, etc.). I c. So it would be somewhat pointless extending an existing OMA-DM solutions to support Puppet clients. The OMA-DM transfers the device settings in a standardized xml tre

[Puppet Users] puppet + mongrel + host_cert/key owner

2009-02-09 Thread Arnau Bria
Hi all, following http://reductivelabs.com/trac/puppet/wiki/UsingMongrel it says that hostkey/cert must be owned by puppet:puppet. I tried to keep original path (and also owner) of both files and seems to puppet still works... what problems could it cause to my conf? # grep lib mongrel.conf S

[Puppet Users] Re: what about kinial ?

2009-02-09 Thread nicolas
> >>> About the external nodes, why doesn't it possible to use   > >>> definition ? > >>> I use definition to create an instance of tomcat for exemple. So I'd > >>> like to be able to create a node with 2 or more instances. > >>> Why there is this limitation ? > > >> You can use definitions, you

[Puppet Users] Re: [Puppet Users]

2009-02-09 Thread Luke Kanies
On Feb 6, 2009, at 5:28 PM, David Dyer-Bennet wrote: > > Darned thing is suddenly failing. We had a reboot last night, and I > changed a couple of files today too, so either one could somehow be > responsible. But I can't figure out how from this crash. First I > noticed > that my changes we

[Puppet Users] Re: Unable to get initial example

2009-02-09 Thread Luke Kanies
On Feb 6, 2009, at 10:45 AM, macbrass wrote: > > I'm having the exact same problem getting the initial puppet install > going on a Mac. I've tried installing it from the packages on Nigel's > site as well as with Ruby Gems, both times on a completely clean > system using the latest build (0.24.7

[Puppet Users] Re: Puppet && OMA-DM interoperability

2009-02-09 Thread Luke Kanies
On Feb 6, 2009, at 2:51 AM, Tom D. Davidson wrote: > >>> what is the format of the xml payload? >> >> Currently xmlrpc over https, and the payload varies but is usually >> just serialized ruby objects. > ok, right. with Puppet there is not device management tree because the > device is abstracted

[Puppet Users] Re: Integrating puppet with etckeeper and similar tools.

2009-02-09 Thread Luke Kanies
On Feb 5, 2009, at 8:14 PM, Daniel Pittman wrote: > > G'day. > > We are currently looking to integrate etckeeper[1] into our puppet > managed hosts, especially the legacy hosts that are still partially > under manual control. > > etckeeper is, essentially, a wrapper around a VCS for /etc, trackin

[Puppet Users] Re: Problem with some of my puppet clients running

2009-02-09 Thread Luke Kanies
On Feb 5, 2009, at 11:48 AM, Steven Nemetz wrote: >>> >>> Anyone have any ideas what could have happened to these 4 systems? >> >> Might you have a fact that's broken, or something similar? That's >> been the cause of 99% of the startup hangs I've seen. >> >> -- >> It isn't necessary to have rela

[Puppet Users] Re: what about kinial ?

2009-02-09 Thread Luke Kanies
On Feb 6, 2009, at 2:04 AM, nicolas wrote: > > On Feb 5, 7:27 pm, Luke Kanies wrote: >> On Feb 5, 2009, at 10:36 AM, Benoit Decherf wrote: >> >>> Ok. >> >>> About the external nodes, why doesn't it possible to use >>> definition ? >>> I use definition to create an instance of tomcat for exemple

[Puppet Users] Re: Puppet and ruby install on hpux

2009-02-09 Thread Luke Kanies
On Feb 9, 2009, at 8:36 AM, paul matthews wrote: > Hi, > > This is fairly off-topic as I'm sure its more to do with general > ruby installation but has anyone had any success with ruby, puppet > and facter installs on hpux (either 11.2x or 11.3x) > I have ruby 1.84 running but that's about th

[Puppet Users] Puppet and ruby install on hpux

2009-02-09 Thread paul matthews
Hi, This is fairly off-topic as I'm sure its more to do with general ruby installation but has anyone had any success with ruby, puppet and facter installs on hpux (either 11.2x or 11.3x) I have ruby 1.84 running but that's about the only success so far An attempt to install facter returns:- rub

[Puppet Users] Re: Are version 0.24.1 and 0.24.4 good enough?

2009-02-09 Thread Kyle Cordes
On Feb 8, 10:19 am, Mike Renfro wrote: > I found I needed a custom repository for local packages pretty early on > -- things not included in stock Debian/Ubuntu installs. Newer puppet > packages went there. > > Repository setup for ftp > server:http://blogs.cae.tntech.edu/mwr/2007/05/28/my-own-

[Puppet Users] compiled catalog for $HOST time

2009-02-09 Thread Arnau Bria
Hi, anyone could explain why every time that puppet compiles a catalog for a host, its compilation time increases? Hosts share same "type", so, from my understanding, compiling catalog time should decrease... (ok, from my poor understanding). Feb 9 11:33:26 gridinstall puppetmasterd[356]: Com

[Puppet Users] Puppet RPMs found on Red Hat Network Satellite and RH FTP site

2009-02-09 Thread DerekW
I found this almost completely by accident: <0> sa_de...@engpsr.etf.barcapetf.com (0 jobs) /var/satellite/redhat/NULL/puppet-server/0.24.6-3.el5/noarch % l total 36K drwxr-xr-x 2 apache root 4.0K Feb 5 01:55 ./ drwxr-xr-x 3 apache root 4.0K Feb 5 01:55 ../ -rw-r- 1 apache root 26K