[Puppet Users] Re: Puppet and pushing changes

2009-04-03 Thread Geoff Newell
We use something similar. All our servers have the UCE agent installed. So we can initiate a puppetd run via UCE when required for 1. Reporting 2. Urgent updates 3. Standard updates. And UCE is ratified by our security bods. Sure UCE is clunky but you have to use the tools you've got. Geoff.

[Puppet Users] Re: Puppet and pushing changes

2009-04-03 Thread chakkerz
I love this topic, first though: > dsh, clsh, clusterit, func, hope grown scripts  etc you name it, I think I > know them all, the question remains, why shouldn't this kind of > functionallity cant be achived with Puppet? i don't know them all but :) i'll have to check out clsh and clusterit ...

[Puppet Users] Re: updating user passwords with puppet

2009-04-03 Thread Sebastian Krueger
Blowfish is the standard for openSUSE since 9.3. And it's the standard since SLES 9 as well. It's way stronger than md5. On Fri, Apr 3, 2009 at 7:41 PM, Robin Lee Powell < rlpow...@digitalkingdom.org> wrote: > > On Fri, Apr 03, 2009 at 03:49:18PM +1300, Sebastian Krueger wrote: > > now the proble

[Puppet Users] Re: Puppet and pushing changes

2009-04-03 Thread Ohad Levy
Mike, dsh, clsh, clusterit, func, hope grown scripts etc you name it, I think I know them all, the question remains, why shouldn't this kind of functionallity cant be achived with Puppet? as far as I see it (and probably I dont see the whole picture) most of the internal infrastructure can suppor

[Puppet Users] Re: debugging puppetrun + HTTP 503 error

2009-04-03 Thread Rolfs
chris wrote: > Sorry, I was wrong -- namespaceauth.conf on the client only had a > [puppetrunner] entry. With the complete list below it works like a > charm. No problem man. I'm just happy to hear it worked out. Regards Rolf --~--~-~--~~~---~--~~ You received t

[Puppet Users] Re: Creating users

2009-04-03 Thread timcharper
On Nov 27 2008, 6:33 pm, RijilV wrote: > This is not a complete example, you should probably wrap this as a define. > I also recommend that if you're going to use puppet to create users you set > their UID/GID manually.  Though I also recommend that you use something like > LDAP for user mgmt rat

[Puppet Users] Re: /etc/init.d/puppet on debian

2009-04-03 Thread Martin Wheldon
Here we go now I'm back to a machine. [main] logdir=/var/log/puppet vardir=/var/lib/puppet ssldir=/var/lib/puppet/ssl rundir=/var/run/puppet factpath=$vardir/lib/facter pluginsync=false environment=production [puppetmasterd] environments=production,testing,development templatedir=/var/lib/puppet

[Puppet Users] Re: /etc/init.d/puppet on debian

2009-04-03 Thread Gary Law
2009/4/2 Keith Edmunds > > OK, you're running exactly the same version of puppet as I am, and I have > the same entries for [puppetd] save for the server name. I don't have the > problem you have. > > It's worth stopping puppet and then checking for any running puppet > process (I use "ps -ef|gre

[Puppet Users] Re: debugging puppetrun + HTTP 503 error

2009-04-03 Thread chris
Sorry, I was wrong -- namespaceauth.conf on the client only had a [puppetrunner] entry. With the complete list below it works like a charm. Thanks! Chris On Apr 3, 11:15 am, chris wrote: > Jason -- I'm not using passenger, this happens when we run our server > with webbrick or with mongrel. >

[Puppet Users] Re: debugging puppetrun + HTTP 503 error

2009-04-03 Thread chris
Jason -- I'm not using passenger, this happens when we run our server with webbrick or with mongrel. Rolf -- namespaceauth.conf on both the client and the server have [fileserver] allow *.local [puppetmaster] allow *.local [pelementserver] allow *.local [puppetrunner] allow serv3

[Puppet Users] Re: Puppet and pushing changes

2009-04-03 Thread Mike Renfro
Ohad Levy wrote: > sure, I know / do this, but I though that one of the goals of puppet > is to avoid ssh and a for loop but seriously, what happens if ssh > doesn't work? ( I mean, usually you need push when something is > broken) > > or you need to deploy something only on a subset of mach

[Puppet Users] Re: Using LDAP to determine package distribution

2009-04-03 Thread Nigel Kersten
On Thu, Apr 2, 2009 at 11:56 AM, engle wrote: > > I am wanting to use LDAP classes to determine what software packages > to install on various Mac. I have the puppet schema installed and have > populated a few puppetclass variables. > > What I am looking for is some guidance on what the init.pp f

[Puppet Users] Re: Using LDAP to determine package distribution

2009-04-03 Thread Rob McBroom
On 2009-Apr-2, at 5:30 PM, engle wrote: > Making headway, but my debug output is telling me that the 'LDAP > Search failed'. I am assuming that this is due to the way that I am > telling my puppetmaster to look at the LDAP directory. Since you're using authentication, that could complicate thing

[Puppet Users] Re: module organisation advice

2009-04-03 Thread Bjørn Dyre Dyresen
2009/4/3 Rene > > Hi > > Our team is providing Linux servers to different departments in our > company. We want to change our configuration management tool and use > puppet in the future. I read the book “Pulling Strings with Puppet” > and the documentation on the puppet webpage. > > When I under

[Puppet Users] module organisation advice

2009-04-03 Thread Rene
Hi Our team is providing Linux servers to different departments in our company. We want to change our configuration management tool and use puppet in the future. I read the book “Pulling Strings with Puppet” and the documentation on the puppet webpage. When I understood correctly, the way to go

[Puppet Users] Re: Debian sarge packages?

2009-04-03 Thread Vincent
I have same request : have puppet on sarge Is ruby 1.8 is available somewhere ? I am trying to recompile and I ve got the following error : devsarge:/export/packages/puppet/puppet-0.24.7# dpkg-buildpackage dpkg-buildpackage: source package is puppet dpkg-buildpackage: source version is 0.24.7-1

[Puppet Users] Re: apache2 template

2009-04-03 Thread Marc Fournier
Hi, > anyone have an apache2 virtualhosts template they like and would like > to share? > > For example I would like to provision quickly > > website1.com > website2.com > website3.com > > and have the docroots be in > > /home/vhosts/website1.com/htdocs/ > /home/vhosts/website2.com/htdocs/ >

[Puppet Users] Re: updating user passwords with puppet

2009-04-03 Thread Martin Wheldon
What I tend to do is change the password of the account I'm managing # passwd user then copy it from /etc/shadow into the manifest. But then we have very few local user accounts. Regards Martin On Fri, Apr 3, 2009 at 7:41 AM, Robin Lee Powell wrote: > > On Fri, Apr 03, 2009 at 03:49:18PM +13

[Puppet Users] Re: /etc/init.d/puppet on debian

2009-04-03 Thread Martin Wheldon
I'm also running the same version of Puppet from the Debian Lenny repositories and I don't see this issue. I do however see that the init script doesn't honour the START=no in /etc/default/puppet. I'll post my config file later when I get access to my kit :) Martin On Thu, Apr 2, 2009 at 11:19