On Fri, Sep 10, 2010 at 03:09:50PM -0700, Nigel Kersten wrote:
> On Fri, Sep 10, 2010 at 10:40 AM, Steven wrote:
> > You need to setup a global CA infrastructure. This would be one root with
> > all the puppet servers being trusted. Then any puppet server can sign certs
> > and accept certs signed
On Fri, Sep 10, 2010 at 4:44 PM, John Ferlito wrote:
> On Fri, Sep 10, 2010 at 03:09:50PM -0700, Nigel Kersten wrote:
>> On Fri, Sep 10, 2010 at 10:40 AM, Steven wrote:
>> > You need to setup a global CA infrastructure. This would be one root with
>> > all the puppet servers being trusted. Then a
On Fri, Sep 10, 2010 at 2:09 PM, Nigel Kersten wrote:
> Or set up a single CA server and use the 'ca_server' directive on your
> clients, removing all CA functionality from your "normal"
> puppetmasters with --no-ca.
Sweeet!
-Jack
--
You received this message because you are subscribed to the
On Fri, Sep 10, 2010 at 10:40 AM, Steven wrote:
> Hi Sukh,
>
>
>
> This has always been possible and it was on my list of things to do. My idea
> was to make systems use the server in their data center and fail over to
> another data center if it was not responding.
>
>
>
> You need to setup a glo
Hi Sukh,
This has always been possible and it was on my list of things to do. My idea
was to make systems use the server in their data center and fail over to
another data center if it was not responding.
You need to setup a global CA infrastructure. This would be one root with
all the pupp
Also you might be interested in putting a vote on this ticket ;) (DNS
SRV support for puppet)
http://projects.reductivelabs.com/issues/3669
Silviu
On 10.09.2010 19:09, Sukh Khehra wrote:
I recently lost the only puppetmaster for a datacenter. I ended up
having to build a new one and then h
On Fri, Sep 10, 2010 at 9:09 AM, Sukh Khehra wrote:
> I recently lost the only puppetmaster for a datacenter. I ended up having to
> build a new one and then hit all clients to remove /var/lib/puppet/ssl and
> point them to the new one I built. That was not fun.
>
>
>
> I can start backing up the
