Re: [Puppet Users] Re: Darned PSON Message!

2011-03-05 Thread Douglas Garstang
On Fri, Mar 4, 2011 at 9:31 AM, James Turnbull wrote: > Bill Proud wrote: > > Sorry Jed I didn't realise that you didn't know about .puppet > > directories. A .puppet directory is created in your home directory if > > you accidentally run puppet as yourself and not as root. The problem > > that

Re: [Puppet Users] External CA: Could not run: Could not retrieve certificate for puppetsrv and not running on a valid certificate authority

2011-03-05 Thread Mohamed Lrhazi
I just noticed the cert and key files have changed after my attempts to start puppet master.. I recreated them, by copy pasting the contents from puppetmaster1 where I had them generated, and now puppetmaster2 starts! On Sat, Mar 5, 2011 at 9:05 PM, Mohamed Lrhazi wrote: > The error says cert do

Re: [Puppet Users] External CA: Could not run: Could not retrieve certificate for puppetsrv and not running on a valid certificate authority

2011-03-05 Thread Mohamed Lrhazi
The error says cert does not match key.. but which cert is it talking about? I only created the puppetmaster2 cert, key and the ca cert. Do I need to copy over the ca key as well? the ca pass ? Mohamed. On Sat, Mar 5, 2011 at 7:24 PM, Mohamed Lrhazi wrote: > On Sat, Mar 5, 2011 at 6:58 PM, Matth

Re: [Puppet Users] External CA: Could not run: Could not retrieve certificate for puppetsrv and not running on a valid certificate authority

2011-03-05 Thread Mohamed Lrhazi
On Sat, Mar 5, 2011 at 6:58 PM, Matthew Black wrote: > had to add this to my puppet conf files for the master section. >     ssl_client_header = SSL_CLIENT_S_DN >     ssl_client_verify_header = SSL_CLIENT_VERIFY I already had those in puppet.conf master section :( Mohamed. -- You received this

Re: [Puppet Users] External CA: Could not run: Could not retrieve certificate for puppetsrv and not running on a valid certificate authority

2011-03-05 Thread Matthew Black
I had to add this to my puppet conf files for the master section. ssl_client_header = SSL_CLIENT_S_DN ssl_client_verify_header = SSL_CLIENT_VERIFY The one error you see from generating the cert is fine because its trying to delete the non-existent CSR, which is because you generated. On

Re: [Puppet Users] External CA: Could not run: Could not retrieve certificate for puppetsrv and not running on a valid certificate authority

2011-03-05 Thread Mohamed Lrhazi
I guess it's the tweaks fo 2.6" that I must be missing... Here is my process: On puppetmaster1: sudo rm -rf /etc/puppet/ssl /var/lib/puppet/ssl sudo puppet cert --generate --certdnsnames puppet.uis.example.com:puppet.example.com:puppet puppet-prod.uis.example.com sudo puppet cert --generate --cer

Re: [Puppet Users] External CA: Could not run: Could not retrieve certificate for puppetsrv and not running on a valid certificate authority

2011-03-05 Thread Matthew Black
That process still works, but you need to have a CA puppet master, a non-CA puppet master, and one client for that to work. The client needs to be told where the CA server is though which in that link tells you how to update the puppet.conf. I use this process and it works great, there was some tw

Re: [Puppet Users] External CA: Could not run: Could not retrieve certificate for puppetsrv and not running on a valid certificate authority

2011-03-05 Thread Mohamed Lrhazi
I just run into the same issue... I was trying to follow this procedure: http://bodepd.com/wordpress/?p=7 My goal is to be able to run my nodes against either of two puppetmasters My first master starts fine, but the second dies with this same error: Could not run: Could not retrieve certifi

[Puppet Users] "Needs Design Decision" state renamed to "Needs Decision"

2011-03-05 Thread James Turnbull
Hi all After some discussion we've decided that "Needs Design Decision" status in the Redmine ticketing system is poorly named. Most of the decisions needed are not in fact Design decisions but also cover product management, code, architecture and other matters. As a result we're going to rename

Re: [Puppet Users] learning, but puppet does not detect change

2011-03-05 Thread Matthew Black
I think there is some confusion, where is the ntp manifest located? Is it in its own module or the site manifest directory. If its the latter, then you need to import that manifest into the site manifest. If its a module, then you still need to do the import for the module. Try updating your site

Re: [Puppet Users] err: Could not run Puppet configuration client: Parameter require failed: No title provided and "" is not a valid resource reference

2011-03-05 Thread Nan Liu
The problem is probably the "" default, try undef instead. Nan On Mar 5, 2011, at 9:18, rdark wrote: >require => $operatingsystem ? { >/CentOS|RedHat/ => Yumrepo["epel"], >default => "", >}, -- You received this message because you are subscribed to the

[Puppet Users] err: Could not run Puppet configuration client: Parameter require failed: No title provided and "" is not a valid resource reference

2011-03-05 Thread rdark
Both the server and the client in this example are running 2.6.5: One class seems to be causing the error: debug: Value of 'preferred_serialization_format' (pson) is invalid for report, using default (b64_zlib_yaml) debug: report supports formats: b64_zlib_yaml marshal raw yaml; using b64_zlib_y

Re: [Puppet Users] Calling class defines in pure ruby DSL

2011-03-05 Thread Oliver Schad
Am Thursday 09 December 2010 schrieb mir Carl Caum: > Let's say I have a define in class 'foo' called 'foo::bar': > > define foo::bar ($var1, $var2) { > ... > } > > Then I have a ruby hostclass > > hostclass :foo do > ... > } > > I see I can successfully set the parameters by doing: