[Puppet Users] Updating CRL for Root CA in Puppet Intermediate CA Setup

2020-08-07 Thread V Jackson
Because of government requirements, I have implemented Puppet Server using the certificate created on an external CA. When the puppet server is initialized with the public certificate of the root CA, the certificate from the root CA issued to the puppet server and the CRL of the root CA, the pu

Re: [Puppet Users] Puppet, ENC, Foreman, Hiera. Best way for coexistence?

2015-07-01 Thread Nicola V
module able to fetch infrastructure data from the Foreman-generated YAML: https://groups.google.com/d/topic/foreman-users/G6XXgYNbY44/discussion I hope this can progress. On Wednesday, July 1, 2015 at 11:23:52 AM UTC+2, Angel L. Mateo wrote: > > El 01/07/15 a las 11:20, Nicola V escribió: >

Re: [Puppet Users] Puppet, ENC, Foreman, Hiera. Best way for coexistence?

2015-07-01 Thread Nicola V
On Wednesday, July 1, 2015 at 8:20:00 AM UTC+2, Angel L. Mateo wrote: > > We are using what you called option 3. The main reason to use > option 3 > instead of 1 was that this way we can have our "truth" under version > control. > Thanks Angel, good to know it's a valid option. On a si

[Puppet Users] Puppet, ENC, Foreman, Hiera. Best way for coexistence?

2015-06-29 Thread Nicola V
Hello, We're considering to migrate away from node definitions to something more future proof, with the idea to introduce an ENC into our infrastructure. I found some discussions loosely touching the topic from a few years back, and I'd love to hear what would be the "way to go" now, in 2015. F

[Puppet Users] New group in Lima - Perú

2014-06-03 Thread Enrique Llanos V.
Hello everyone, I'm Enrique from Lima, Perú (SouthAmerica) and I've been working with puppets at the company I work for last couple of months (and still learning), and since I love it I think it's time to spread the word around here, in that sense I'm going to start a Perú - Puppet groups and p

[Puppet Users] Re: puppet nagios module integration

2014-01-12 Thread Raj kumar V
Hi Paul, Can you be more specific how you are using puppet to install nagios? You mean you are using puppet to install nagios agents in every server? Do you have anything other than in mind that can be automated in nagios using puppet? Thanks Raj On Monday, 30 December 2013 09:52:21 UTC-8,

[Puppet Users] Re: connection error in console UI

2014-01-12 Thread Raj kumar V
ld not come up with a clear > solution. > > Werner > > On Saturday, November 16, 2013 6:40:08 AM UTC-5, Raj kumar V wrote: >> >> When I click Add Class, I am seeing >> >> We found these classes on your system [image: Notice] >> [image: Failed]Connection

[Puppet Users] File handling

2013-11-27 Thread Raj kumar V
Hi There, I am trying to do the following using puppet 1. Create a dir call mydir 2. Download a file from internet using Exec 3. Change the mode of the file 3. Install it and ensure running and service is enabled. 4. Delete it the installer file. When I do this until 3 rd step I am fine. But

[Puppet Users] Re: Duplicate declaration

2013-11-27 Thread Raj kumar V
I read the JCBollingers advice and removed the Class[blah blah] stuff and it worked... On Wednesday, 27 November 2013 15:02:18 UTC+5:30, Raj kumar V wrote: > > I have module, for which if I add the class in the UI and run the agent > with --test it fails with the following error. But

[Puppet Users] Duplicate declaration

2013-11-27 Thread Raj kumar V
I have module, for which if I add the class in the UI and run the agent with --test it fails with the following error. But If I just add the include in the init class and run, it works. Any idea? Error: Could not retrieve catalog from remote server: Error 400 on SERVER: Duplicate declaration:

[Puppet Users] puppet adding class in console

2013-11-26 Thread Raj kumar V
I have written a module and for testing, I have unzipped the tar in /etc/puppetlabs/puppet/modules directory. Now how can I have my class autodetected in the UI? It is not coming if I refresh the add class link. -- You received this message because you are subscribed to the Google Groups "Pupp

[Puppet Users] Console UI - Add Class - params

2013-11-25 Thread Raj kumar V
Hi 1. I have a params class which holds some dynamic values at run time. But my parameters are populated in the UI when I add the class to a specific node. What are the steps or guidelines to have params autoloaded in the console with the specified variable name? 2. I have built the module u

[Puppet Users] How to store "bash command:" output in a variable as array

2013-11-25 Thread sasikiran v
exec {'ls': command => "ls", path => "/usr/bin:/bin", provider => shell, } So the output of "ls" contains files/directories, these should be stored in a array for suppose "$my_array" and it should be used globally in the module. Can any one help me in this -- You receive

[Puppet Users] get list of all nodes in site.pp and use it in another module

2013-11-22 Thread sasikiran v
How to use pupppet to get all the list of node names available in site.pp and use it in another module which is imported in site.pp For example site.pp - node1 { 'first_node': a => 'hello' } node2 { 'second_node': b => 'hai' } import new_module.pp new_module.pp

[Puppet Users] Re: Could not find parent resource type

2013-11-21 Thread Raj kumar V
rams could not be found Error: Could not find class site24x7::params for On Thursday, 21 November 2013 14:41:01 UTC+5:30, Raj kumar V wrote: > > I have written a module with a init class. Now I have to pass a dynamic > value. so I have created a params class and inherited in the init

[Puppet Users] Re: Could not find parent resource type

2013-11-21 Thread Raj kumar V
Still the same error. I have the params in the same init location. http://pastebin.com/nCmcgMi4 look at the pp scripts here On Thursday, 21 November 2013 14:41:01 UTC+5:30, Raj kumar V wrote: > > I have written a module with a init class. Now I have to pass a dynamic > value.

Re: [Puppet Users] Could not find parent resource type

2013-11-21 Thread Raj kumar V
} What am i missing? On Thursday, 21 November 2013 15:41:49 UTC+5:30, Felix.Frank wrote: > > This looks pretty bad :-) > > Can you paste (excerpts of) your manifest code on pastebin or a similar > service? > > On 11/21/2013 10:11 AM, Raj kumar V wrote: > > I have wr

[Puppet Users] Could not find parent resource type

2013-11-21 Thread Raj kumar V
I have written a module with a init class. Now I have to pass a dynamic value. so I have created a params class and inherited in the init class and trying to access the value. But puppet says Could not find parent resource type ::params of type hostclass error. Any idea? -- You received th

Re: [Puppet Users] puppet testing

2013-11-20 Thread Raj kumar V
you simulate the puppet run only. > > hth, > > Martin > > On 20 Nov 2013, at 11:34, Raj kumar V > > wrote: > > > Hi There, > > > >I am kind of lost, understood something wrong. I have written a > module. Now how can I test this m

[Puppet Users] puppet testing

2013-11-20 Thread Raj kumar V
Hi There, I am kind of lost, understood something wrong. I have written a module. Now how can I test this module? Do I need to copy it to agent or server? Is it possible to test it as a standalone module where I have a machine with puppet agent or server installed? It is a simple module I do

[Puppet Users] Re: Puppet Enterprise Console not accessing the modules

2013-11-18 Thread Raj kumar V
I have the same issue. Got a coonection error in the UI and same message in the logs. I totally rebuilt the puppet server and some how the error went away. But some errors came. Mainly look at the certificate part is working well. On Monday, 18 November 2013 09:39:07 UTC+5:30, Rafael Abdalla wr

[Puppet Users] add classes returns coonection in console

2013-11-16 Thread Raj kumar V
Problem loading console auth middleware: cannot load such file -- console_auth_middleware Problem with loading console: cannot load such file -- console_middleware Problem with loading console auth: cannot load such file -- console_auth_app_middleware Problem with loading event inspector: cannot

[Puppet Users] connection error in console UI

2013-11-16 Thread Raj kumar V
When I click Add Class, I am seeing We found these classes on your system [image: Notice] [image: Failed]Connection error. We could not find classes on your master. Does your puppet master allow querying resource types? Don't see a class? [image: Notice] Type in a class to add What should I fix?

Re: [Puppet Users] puppdb connection refused

2013-11-16 Thread Raj kumar V
2 things. I dont know which one solved it. I dont know why I have to give the fqdn name in the jetty.ini file for the ssl host I ran the puppetdb ssl from /opt/puppet/sbin/puppetdb-ssl-setup . Dont know why it is in opt dir On Friday, 15 November 2013 22:22:38 UTC+5:30, Ken Barber wrote: > >

Re: [Puppet Users] puppdb connection refused

2013-11-15 Thread Raj kumar V
commands would be helpful to see. > > ken. > > On Fri, Nov 15, 2013 at 4:31 PM, Raj kumar V > > > wrote: > > Agent fails with the following error. I changed the jetty.ini file to > > 0.0.0.0 and still the same. I restart puppetdb alone after this...what > am

[Puppet Users] puppdb connection refused

2013-11-15 Thread Raj kumar V
Agent fails with the following error. I changed the jetty.ini file to 0.0.0.0 and still the same. I restart puppetdb alone after this...what am i missing? [root@nfaxen-cent1 ~]# puppet agent --test Warning: Unable to fetch my node definition, but the agent run will continue: Warning: Error 400

[Puppet Users] Issue with starting puppetmaster service

2013-09-22 Thread V
HI I have installed puppet on a RHEL 6.x machine. When I try to start the puppet master service, it fails and when I check status it says - "puppet dead but subsys locked". [root@testvm init.d]# service puppet status puppet (pid 13304) is running... [root@testvm init.d]# service puppetmaster

Re: [Puppet Users] Renaming puppet binary to use with two puppet agent instances

2013-07-10 Thread John V.
between two masters? > > Can't you achieve the same effect with modules? > > > On 10 July 2013 03:33, John V. > wrote: > > I'm trying to do the same thing and running into two minor problems.. I > > would like to rename the puppet command > > to someth

[Puppet Users] Renaming puppet binary to use with two puppet agent instances

2013-07-09 Thread John V.
I'm trying to do the same thing and running into two minor problems.. I would like to rename the puppet command to something like puppet3. We're running two versions for two separate teams for 2.7 and 3.x However, when I try to do a symlink I get the following error.

Re: [Puppet Users] Multiple Puppet agents on one node?

2013-07-05 Thread John V.
Hi, Sorry to revive this old thread, but I'm trying to do the same thing and running into two minor problems.. I would like to rename the puppet command to something like puppet3. We're running two versions while we're migrating from 2.7 to 3.x However, when I try to do a symlink I get the fol

Re: [Puppet Users] Install rubygem package in order to use with library

2012-08-22 Thread Sergey V. Arlashin
.. > What's on line 83 of your init.pp? zabbix_host { "${::fqdn}": ensure => present, template => $zabbix_template, group=> 'Linux servers', api_host => $api_host, require => Package['librubix-puppet-ruby1.8'] } O

[Puppet Users] Install rubygem package in order to use with library

2012-08-21 Thread Sergey V. Arlashin
Hello! I have a custom function which requires a ruby gem which I have in my deb-repository. If the package is installed beforehand manually the function works well. But if I want to install the package with puppet I get the following error: out: Could not autoload zabbix_host: no such file to

[Puppet Users] Re: How to modify client authentication in passenger based puppet master behind ssl proxy

2012-08-20 Thread kp-v
I think the best starting point is to read this article: http://www.masterzen.fr/2010/11/14/puppet-ssl-explained/ It explains the entire process. You could use squid to intercept incoming requests, decrypt, then reencrypt with backend headers. On Monday, August 20, 2012 10:09:21 AM UTC-7, opop

[Puppet Users] Re: Puppet Master Forbidding Access to Cert Revocation List

2012-08-10 Thread kp-v
followed a non-standard installation process. I will post again if I figure out how to patch it. On Thursday, August 9, 2012 11:24:52 AM UTC-7, kp-v wrote: > > I don't think there is an issue with my configuration. I believe I am > running into issues with indirector.rb not findi

[Puppet Users] Re: Error 400 on Server: Another local or imported resource exists with the type and title Sshkey

2012-08-09 Thread kp-v
Does $hostname ever get set to $hostname in the add key section ? Also, can you show the results of: puppet resource sshkey foohost On Thursday, August 9, 2012 1:32:40 PM UTC-7, banjer wrote: > > I am attempting to remove an old ssh host key from > /etc/ssh/ssh_known_hosts. In my manifest, I h

[Puppet Users] Re: Puppet Master Forbidding Access to Cert Revocation List

2012-08-09 Thread kp-v
I don't think there is an issue with my configuration. I believe I am running into issues with indirector.rb not finding the correct terminus for my certificate revocation list. On Wednesday, August 8, 2012 10:21:05 AM UTC-7, kp-v wrote: > > Hey folks; > > I am having issu

[Puppet Users] Puppet Master Forbidding Access to Cert Revocation List

2012-08-08 Thread kp-v
Hey folks; I am having issues retrieving the catalog from my master. It seems to be an issue with the ACLs for the /certificate_revocation_list/ca, however it still produces an error when I set the ACLs to allow everything! I am almost certain it has something to do with my non-default installa

Re: [Puppet Users] migrating to new puppet servers

2011-08-31 Thread Naresh V
e you an easy way to fail back in >> case you run into any issues. > > This sounds like a good idea. I find certificates endlessly confusing - can > you please spell this out in detail? http://www.masterzen.fr/2010/11/14/puppet-ssl-explained/ > Thanks, > Jonathan -Naresh V.

Re: [Puppet Users] Puppet Guideline : for file service to puppet client

2011-07-05 Thread Naresh V
his? After moving away from WEBrick (default), see http://groups.google.com/group/puppet-users/msg/643782eec6c899d6 -Naresh V. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegro

[Puppet Users] Turn off client autoupdate

2011-06-24 Thread Sergey V. Arlashin
Hello! By default puppet node connects to server periodically and looks if there is something execute. I'm wondering is it possible to make puppet clients not connect to server themselves? So that it would be possible to update a node only with puppetrun nodename. --- WBR, Sergey -- You receive

[Puppet Users] Turn off client autoupdate

2011-06-24 Thread Sergey V. Arlashin
By default puppet node connects to server periodically and looks if there is something execute. I'm wondering is it possible to make puppet clients not connect to server themselves? So that it would be possible to update a node only with puppetrun nodename. --- WBR, Sergey -- You received this m

Re: [Puppet Users] How do you distribute ruby-augeas for ruby-entreprise?

2011-03-15 Thread Naresh V
x27;, '/opt/ruby-enterprise/bin/gem' in the spec file (or even make a default gem2rpm template with that) (customise as much as you want) and build your RPMs. (relevant: http://zeusville.wordpress.com/2010/11/05/gem2rpm-and-development-deps/ ) -Naresh V. -- You received this message b

Re: [Puppet Users] A ruby question, about arrays

2011-03-12 Thread Naresh V
er the visual appeal: $uiso_scanners = { "uiso-scanner.example.com" => "192.168.151.21", "uiso-scanner1.example.com" => "192.168.18.37", } <% if uiso_scanners -%> # Allow communication with UISO scanners <% uiso_scanners.ke

Re: [Puppet Users] Re: err: Could not request certificate: Error 400 on SERVER: error too long

2011-03-09 Thread Naresh V
be due to something else (and I couldn't reproduce after isolating it) Something else = trying to run another instance of puppetmaster on the same machine (and same confdir / moduledir but different rundir). And for some reason the CSR for my new host ended up being 0 bytes. Removing that and re-requ

[Puppet Users] Re: err: Could not request certificate: Error 400 on SERVER: error too long

2011-03-02 Thread Naresh V
Hi again, A couple of quick updates: - I upgraded my server and client to 2.6.6-rc1 (again from tmz's repo) and the problem still persists. - I run the master behind nginx and via unicorn. Quick revert to WEBrick showed the same problem. -Naresh V. On 2 March 2011 21:17, Naresh V

[Puppet Users] err: Could not request certificate: Error 400 on SERVER: error too long

2011-03-02 Thread Naresh V
Hi, I recently upgraded my puppet master and clients from 2.6.2 to 2.6.4. Things were fine until today I tried introducing a new host to my master for the first time: client: [root@db-us1 ~]# rpm -qa puppet puppet-2.6.4-0.7.el5 [root@db-us1 ~]# puppetd -t -v warning: peer certificate won'

Re: [Puppet Users] can we choose which inteface defines the $ipaddress fact?

2011-02-08 Thread Naresh V
On 8 February 2011 07:44, Gabriel Filion wrote: [...] > Is there a way to force facter to chose a specific interface for the > ipaddress value? Hi, I was wondering *when* would this part of the ipaddress.rb fact code would be used: --(0)> tail -20 /usr/lib/ruby/site_ruby/1.8/facter/ipaddress.r

[Puppet Users] puppetmasterd verbose log

2011-01-27 Thread Sergey V. Arlashin
Hi! When I issue $ puppetmasterd --no-daemonize --verbose I get very neat and clear log to STDIN. But I can't figure out how to get this log when I start puppetmasterd without --no-daemonize option. Is it possible? -- You received this message because you are subscribed to the Google Groups "

Re: [Puppet Users] What the??? Failing dependancies and not sure why...

2011-01-21 Thread Naresh V
On 21 January 2011 22:35, Peter Berghold wrote: > Observe the following code sniget: [...] >     file { >         nagios-ssh-key : >             path => "/home/nagios/.ssh/authorized_keys", >             owner => "nagios", group => "nagios", mode => 0600, >             source => "puppet://puppet/s

Re: [Puppet Users] reserved words

2011-01-11 Thread Naresh V
On 11 January 2011 22:27, Dan Bode wrote: > > > On Tue, Jan 11, 2011 at 1:36 AM, Uwe Bartels wrote: [...] > > The are special variables, not reserved words: > > also $module_name, $title, $name, $caller_module_name Hi Dan, (sorry for the minor thread-hijack) What's the difference between $modu

Re: [Puppet Users] Nested Class

2010-12-27 Thread Naresh V
net > } > Doesn't that mean you've declared xinetd and xinetd::xinetd::telnet? I think you want: class xinetd { ... class telnet { ... } ... } (which gives you xinetd and xinetd::telnet) -Naresh V. -- You received this message because you are subscribed to the Google Gr

Re: [Puppet Users] 2.6.3 RPM's

2010-12-01 Thread Naresh V
On 1 December 2010 23:01, Douglas Garstang wrote: > Anyone know where I can get the RPM's for puppet 2.6.3 on CentOS? > Doug > Here: http://tmz.fedorapeople.org/repo/puppet/epel/5/ -Naresh V. -- You received this message because you are subscribed to the Google Groups "

Re: [Puppet Users] Developing functions

2010-12-01 Thread Naresh V
o one of my manifests that results in a > syntax error. Without that option, puppet helpfully ignores the error and > presents the older version of the manifest to you resulting in exactly the > symptoms you are complaining about. > > -- Why not use a pre-commit syntax check hook (in

[Puppet Users] Re: getting empty files from fileserver

2010-10-05 Thread Naresh V.
-10-06 00:04:35] bar - - [06/Oct/2010:00:04:35 CDT] "GET / production/file_metadata/users//sudoers HTTP/1.1" 200 336 There should've been a "GET /production/file_metadata/users/blah/ sudoers.xen-3" etc.) Thank you, Naresh. On Aug 25, 6:23 pm, "Naresh V." wrote:

[Puppet Users] Re: getting empty files from fileserver

2010-08-25 Thread Naresh V.
Hi, My setup: gems: rack (1.0.1) rails (2.3.4) rake (0.8.7) activerecord (2.3.8, 2.3.4) activeresource (2.3.8, 2.3.4) activesupport (2.3.8, 2.3.4) mongrel (1.1.5) RPMs: puppet-server-2.6.0-0.7.el5 (tmz's) I patched the files installed via the RPM to test out nginx+mongrel as follows (taken from

[Puppet Users] Re: Managing about 30 users?

2009-08-09 Thread Michael v s
ssah_authorized_keys bug is fixed on 0.25rc1 http://projects.reductivelabs.com/issues/2487 Cheers On Aug 4, 4:36 pm, Mike Harding wrote: > I have about 30 dev. and operation users on my machines, is there a > recipe anywhere for doing this? The best practices doc on the wiki is > incomplete an

[Puppet Users] Package manager specs: Best of breed?

2008-11-25 Thread Mark V
Hi Group, In order to come to grips with puppet I thought to start by using it to manage my laptop. openSUSE 11.0. This distribution now uses zypper as its package manager. It seems that the patch, http://projects.reductivelabs.com/issues/show/1223 is awaiting some tests so that seems a

[Puppet Users] Re: Facter is broken on Open Solaris (facter-1.5.2)

2008-11-14 Thread Parimi V.
ry bizarre error message listed below hidden in the logs. <<>> Could not retrieve catalog: private method `chomp' called for nil:NilClass <> Thanks, Parimi V. --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Go

[Puppet Users] Facter is broken on Open Solaris (facter-1.5.2)

2008-11-14 Thread Parimi V.
# /usr/local/ruby/bin/facter /usr/local/ruby-1.8.7-p72/lib/ruby/site_ruby/1.8/facter/ operatingsystemrelease.rb:79: private method `chomp' called for nil:NilClass (NoMethodError) from /usr/local/ruby-1.8.7-p72/lib/ruby/site_ruby/1.8/facter/ util/resolution.rb:117:in `call' from /us