Re: [SPAM] Re: [Puppet Users] help with the firewall puppet forge module

2011-10-26 Thread Ken Barber
Lol. Yeah I'm surprised puppet didn't break on that. So we've pushed 0.0.2 with a fix for your puppet/util/firewall problem - so thanks a lot for that :-). The next person might have an easier time of it I hope. ken. On Wed, Oct 26, 2011 at 10:29 PM, Dave Alden wrote: > Hi, > > On Oct 26, 2011,

Re: [SPAM] Re: [Puppet Users] help with the firewall puppet forge module

2011-10-26 Thread Dave Alden
Hi, On Oct 26, 2011, at 11:50 AM, Ken Barber wrote: > Odd that you get no results. > > I'm curious. What is the output of 'iptables-save' on your box? > > Also ... can you do a: > > puppet resource firewall > > And does it return anything? Try inserting a rule and testing it as > well (rule ne

Re: [SPAM] Re: [Puppet Users] help with the firewall puppet forge module

2011-10-26 Thread Ken Barber
Odd that you get no results. I'm curious. What is the output of 'iptables-save' on your box? Also ... can you do a: puppet resource firewall And does it return anything? Try inserting a rule and testing it as well (rule needs a number - but we are fixing that now). ken. On Wed, Oct 26, 2011 a

Re: [SPAM] Re: [Puppet Users] help with the firewall puppet forge module

2011-10-26 Thread Dave Alden
Hi, On Oct 26, 2011, at 10:55 AM, Ken Barber wrote: > Is the class getting included properly? You should be getting: > > err: Could not run Puppet configuration client: Parameter name failed: > Invalid value "allow-snmp". I believe it is. I was not getting the error, but I've gone ahead and add

Re: [Puppet Users] help with the firewall puppet forge module

2011-10-26 Thread Ken Barber
Hi Dave, Is the class getting included properly? You should be getting: err: Could not run Puppet configuration client: Parameter name failed: Invalid value "allow-snmp". Which is what I'm seeing when I use that rule. The rules need numbers for ordering:      firewall { "500 allow-snmp":    

Re: [Puppet Users] help with the firewall puppet forge module

2011-10-26 Thread Dave Alden
Hi, So now I'm not getting any errors when I put the following in one of my classes: firewall { "allow-snmp": proto => 'all', dport => '161', action => 'accept', } But I'm also not seeing any change in my iptables firewall (nor am I seeing anything about th

Re: [Puppet Users] help with the firewall puppet forge module

2011-10-26 Thread Ken Barber
Thanks Dan - I've submitted a pull request and created a ticket around this. http://projects.puppetlabs.com/issues/10295 I've also updated the README to be more descriptive about restarting and pluginsync if the workaround doesn't do what we want. I've tested this standalone - and it seems to wo

Re: [Puppet Users] help with the firewall puppet forge module

2011-10-26 Thread Dan Carley
On 25 October 2011 22:49, David Alden wrote: > I got: > > err: Could not autoload firewall: no such file to load -- > puppet/util/firewall at /etc/puppet/modules/snmp/manifests/config.pp:9 > on node ns2.math.osu.edu > > I tried "puppet describe firewall" and got: > > Could not run: Could not auto

Re: [SPAM] Re: [Puppet Users] help with the firewall puppet forge module

2011-10-25 Thread David Alden
Hi, On Oct 25, 2011, at Oct 25, 9:54 PM, Ken Barber wrote: > Did you run puppet agent -t on your master? No, I hadn't. Is that mentioned in the instructions, or should I have known that? :-) I'm setting up a new puppet server (sadly I've been running the same old version since the guy who se

Re: [SPAM] Re: [Puppet Users] help with the firewall puppet forge module

2011-10-25 Thread Scott Smith
FWIW, I use this as `puppetlabs-firewall' and the resource name `firewall'. On Tue, Oct 25, 2011 at 6:54 PM, Ken Barber wrote: > Did you run puppet agent -t on your master? > > Check your /var/lib/puppet/lib/puppet/util directory ... and let me > know if there is a copy of firewall.rb in there b

Re: [SPAM] Re: [Puppet Users] help with the firewall puppet forge module

2011-10-25 Thread Ken Barber
Did you run puppet agent -t on your master? Check your /var/lib/puppet/lib/puppet/util directory ... and let me know if there is a copy of firewall.rb in there before and after running puppet agent on your master. ken. On Wed, Oct 26, 2011 at 2:47 AM, David Alden wrote: > Hi, > > On Oct 25, 201

Re: [SPAM] Re: [Puppet Users] help with the firewall puppet forge module

2011-10-25 Thread David Alden
Hi, On Oct 25, 2011, at Oct 25, 9:42 PM, Ken Barber wrote: > Try restarting your puppetmaster and trying again. Nope - same problem. Thanks for the suggestion. ...dave -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, se

Re: [Puppet Users] help with the firewall puppet forge module

2011-10-25 Thread Ken Barber
Try restarting your puppetmaster and trying again. ken. On Wed, Oct 26, 2011 at 2:29 AM, David Alden wrote: > Hi, > > On Oct 25, 2011, at Oct 25, 6:20 PM, Nigel Kersten wrote: >> Dave, you may have an older version of puppet-module tool that requires you >> to do: >> >> mv puppetlabs-firewall f

Re: [Puppet Users] help with the firewall puppet forge module

2011-10-25 Thread David Alden
Hi, On Oct 25, 2011, at Oct 25, 6:20 PM, Nigel Kersten wrote: > Dave, you may have an older version of puppet-module tool that requires you > to do: > > mv puppetlabs-firewall firewall > > Newer versions strip the user prefix from the module name automatically. I'm running 0.3.4. The module w

Re: [Puppet Users] help with the firewall puppet forge module

2011-10-25 Thread Nigel Kersten
Dave, you may have an older version of puppet-module tool that requires you to do: mv puppetlabs-firewall firewall Newer versions strip the user prefix from the module name automatically. On Tue, Oct 25, 2011 at 2:49 PM, David Alden wrote: > Hi, > > I'm new to the puppet forge - I decided t

[Puppet Users] help with the firewall puppet forge module

2011-10-25 Thread David Alden
Hi,  I'm new to the puppet forge - I decided to give the puppetlabs firewall module a try.  I ran: cd /etc/puppet/modules  # yes - this is where my modules go puppet-module install puppetlabs-firewall and I modified my puppet.conf to include the "pluginsync = true" in the [agent] section.  When