Re: [Puppet Users] Did not receive certificate

2014-07-16 Thread Danny Roberts
On Wednesday, 16 July 2014 14:55:58 UTC+1, Felix.Frank wrote: > > > > Have you tried restarting the agent process? :) > Unbelievably no! Everything is behaving so far, thanks for the kick! -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To u

Re: [Puppet Users] puppet agent doesn't detect package to install

2014-07-16 Thread Spencer Krum
You could also use the 'run puppet console as administrator' and run puppet agent --test --debug On Wed, Jul 16, 2014 at 8:52 AM, Rob Reynolds wrote: > Could be quite a few things, including permissions, network resource > access, etc. > > You might try debug output on the service, it's possibl

[Puppet Users] puppet master --genconfig generating deprecated features

2014-07-16 Thread Adam Chou
I'm running a fresh install of 3.6.2 and when I use the config file from puppet master --genconfig, there are deprecated settings in there. Consequently, running puppet agent -t will throw a bunch of deprecation warnings. Shouldn't the --genconfig either not include the deprecated configuration

[Puppet Users] Passing undef as argument to classes & defines overrides default parameter

2014-07-16 Thread Cristian Falcas
Hello, Does anybody know if the issue from https://projects.puppetlabs.com/issues/16221 was implemented after all? I'm having the same problem with puppet 3.6.2 Best regards, Cristian Falcas -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To

Re: [Puppet Users] Re: multiple VMs from a single node.pp file

2014-07-16 Thread José Luis Ledesma
El 16/07/2014 16:06, "Felix Frank" escribió: > > On 07/16/2014 03:04 PM, jcbollinger wrote: > > Supposed I have 200 different machines (VMs) sitting on each > > developer's desktop (rather in their VMware hypervisor)... > > 1) can they all have the same certname, so I only have to main

Re: [Puppet Users] GPS data & facter

2014-07-16 Thread Peter Berghold
Sounds like a job for a custom fact to me. On Wed, Jul 16, 2014 at 11:11 AM, Ciro Iriarte wrote: > Hi!, anybody used GPS data or custom information to populate SNMP > Syslocation attribute for example?. > > Regards, > CI.- > > -- > You received this message because you are subscribed to the Goo

[Puppet Users] Announce: Puppet Explorer 1.1.0

2014-07-16 Thread Erik Dalén
Just released a new version of Puppet Explorer. This is mainly a compatibility release for PuppetDB 2.1.0. It also drops support for PuppetDB 2.0.0. The source, more info and screenshots can be found at the Github page: https://github.com/spotify/puppetexplorer A built version of it ready for ins

Re: [Puppet Users] puppet agent doesn't detect package to install

2014-07-16 Thread Rob Reynolds
Could be quite a few things, including permissions, network resource access, etc. You might try debug output on the service, it's possibly failing or needing an interactive session to install. The above is somewhat more involved to accomplish with 3.4.3, so I've attached an image for you once you

[Puppet Users] GPS data & facter

2014-07-16 Thread Ciro Iriarte
Hi!, anybody used GPS data or custom information to populate SNMP Syslocation attribute for example?. Regards, CI.- -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email

[Puppet Users] Re: multiple VMs from a single node.pp file

2014-07-16 Thread randal cobb
Thanks, all! I took highlights from all your posts and came up with the following solution: I wrote a relatively simple shell script that users of the VM image will run at launch to set up their VMs. It does the following: 1) requires them to enter a domain userId 2) formulates a certname usin

Re: [Puppet Users] Best Practice - replacing /etc/passwd and +@netgroups

2014-07-16 Thread Matt Zagrabelny
> On Wed, Jul 16, 2014 at 10:24:26AM -0400, Betsy Schwartz wrote: >>I'm still sort of boggled that nobody seems to be using puppet for >>/etc/passwd. That always seemed to us to be the *first* thing we'd want to >>get under centralized control. We use nsswitch. % man nsswitch.conf %

Re: [Puppet Users] puppetdb and client certificate

2014-07-16 Thread Ken Barber
I wrote that document, at the time client based certificates weren't really supported or something like that. Specifically not supporting client auth is hinted in the JDBC driver details here: http://jdbc.postgresql.org/documentation/head/ssl-factory.html I seem to recall there being a problem wi

[Puppet Users] Weekly parameter for the cron resource behaves differently with future parser

2014-07-16 Thread Peter Van Biesen
Hi, I just ran into an issue with the future parser. I had following statement in my manifests : cron {'zorgregieRapportering': command => "/usr/projects/admintools/cronWrap.bash -s /home/weblogic/JOB/rapporten/zorgregieRapportering.bash", ensure => present, user => weblogic,

Re: [Puppet Users] Best Practice - replacing /etc/passwd and +@netgroups

2014-07-16 Thread Christopher Wood
Um, why? There are more regularized methods of RBAC than touching /etc/passwd. For my part I'd rather keep hosts as similar as possible and have authentication controlled elsewhere. That way I have complex manifests about user authentication on a subset of hosts, and simplified auth client manif

[Puppet Users] puppetdb and client certificate

2014-07-16 Thread Fabrice Bacchella
I'm trying to authenticate a puppetdb on a postgresql server using a client certificate. I managed to set up SSL on server side without any problem but http://docs.puppetlabs.com/puppetdb/2.1/postgres_ssl.html says : Note: At this point the documentation below only covers server-based SSL, clie

Re: [Puppet Users] How can I use mcollective with fqdns?

2014-07-16 Thread Christopher Wood
Perhaps use a regex, depending on your naming? mco ping -F 'hostname=/dev[12]/ Or a compound filter. mco ping -S 'hostname=dev1 or hostname=dev2' If you're using something other than ping you might feed it a list of nodes via --nodes, but I'm not getting any responses via the node list right n

Re: [Puppet Users] Best Practice - replacing /etc/passwd and +@netgroups

2014-07-16 Thread Betsy Schwartz
Thank you! pam access may well be the right direction to go for us. I'm still sort of boggled that nobody seems to be using puppet for /etc/passwd. That always seemed to us to be the *first* thing we'd want to get under centralized control. I understand that centralized control reduces the need

Re: [Puppet Users] Puppet module 'issue' with sysctl provider (augeasproviders)

2014-07-16 Thread Stefan Heijmans
Hi, the difference is in the /etc/sysctl.conf;' Puppet module with all resources in 1 file === After; /etc/sysctl.conf -rw-r--r--. 1 root root 2679 Jun 19 12:54 /etc/sysctl.conf fs.aio-max-nr = 1048576 fs.file-max = 6815744 kernel.core_uses_pid = 1 kernel

Re: [Puppet Users] Re: multiple VMs from a single node.pp file

2014-07-16 Thread Felix Frank
On 07/16/2014 03:04 PM, jcbollinger wrote: > Supposed I have 200 different machines (VMs) sitting on each > developer's desktop (rather in their VMware hypervisor)... > 1) can they all have the same certname, so I only have to maintain a > single node.pp manifest? > > > > Yes, t

Re: [Puppet Users] Puppet module 'issue' with sysctl provider (augeasproviders)

2014-07-16 Thread Felix Frank
On 06/19/2014 02:12 PM, Stefan Heijmans wrote: > Puppet module with all resources in 1 file > === > ... > kernel.sem is available in /etc/sysctl.conf > kernel.sem = 250 32000 100 128 > kernel.shmall is available in /etc/sysctl.conf > kernel.shmall = 107374182

Re: [Puppet Users] Did not receive certificate

2014-07-16 Thread Felix Frank
On 07/16/2014 03:30 PM, Danny Roberts wrote: > On a couple of nodes I am getting an entry like this in the logs: > > |Jul 16 09:08:36 database puppet-agent[20025]: Did not receive certificate > > | > > From another post on StackOverflow I saw that sometimes this is due to > the /etc/hosts not be

Re: [Puppet Users] certificate not found on agent machine

2014-07-16 Thread Felix Frank
On 07/16/2014 06:53 AM, Nishantu Kumar wrote: > > I can run the command manually for digital certificate but is there any > way to generate the certificate on agent machine automatically without > running any manual commands. The agent *does* perform all generating it can on its won, but the *sig

[Puppet Users] puppet agent doesn't detect package to install

2014-07-16 Thread sébastien dagnicourt
Hello, I have a puppet agent (3.4.3) on a windows 2012 server. The agent, when running as a service, doesn't detect that a package is not installed on the server and do nothing. However, if I launch the puppet_interactive.bat script it works. Any ideas ? -- You received this message because

[Puppet Users] Did not receive certificate

2014-07-16 Thread Danny Roberts
On a couple of nodes I am getting an entry like this in the logs: Jul 16 09:08:36 database puppet-agent[20025]: Did not receive certificate >From another post on StackOverflow I saw that sometimes this is due to the /etc/hosts not being correctly populated. In no cases has this fixed the issu

[Puppet Users] Re: Puppet module 'issue' with sysctl provider (augeasproviders)

2014-07-16 Thread Stefan Heijmans
anyone? -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.googl

Re: [Puppet Users] multiple VMs from a single node.pp file

2014-07-16 Thread jcbollinger
On Tuesday, July 15, 2014 3:14:42 PM UTC-5, Peter Bukowinski wrote: > > > On Jul 15, 2014, at 3:09 PM, randal cobb > > wrote: > > No. Each vm/puppet agent needs a unique cert. > > That is incorrect. Agents absolutely may use the same cert. What they may not do is use the same cert*name* bu

[Puppet Users] Re: multiple VMs from a single node.pp file

2014-07-16 Thread jcbollinger
On Tuesday, July 15, 2014 2:09:57 PM UTC-5, randal cobb wrote: > > Hello, all... > > I have a scenario where all of our developers (spread geographically > around the world) use a VMWare or VirtualBox VM on their local desktop to > develop portions of a single product. I've seemed to inherit t