[Puppet Users] Potentially dangerous behaviour of puppet with facter timeouts

2008-11-22 Thread Ross McKerchar
Hi All, I've just encountered a (admittedly fairly unlikely) sequence of events that could have lead to puppet breaking a lot of our systems. Most things are behaving correctly but the end result is unexpected and dangerous, so although I'm not sure what the fix is I thought I'd highlight it a

[Puppet Users] Re: Incomplete documentation regarding master-side client cert generation?

2008-11-22 Thread Don Jackson
OK, I added this info to this paragraph in the wiki. On Nov 21, 2008, at 2:46 PM, James Turnbull wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Don Jackson wrote: >> I believe that the following paragraph from the wiki is at best not >> clear about this, if not downright incomple

[Puppet Users] Re: Potentially dangerous behaviour of puppet with facter timeouts

2008-11-22 Thread RijilV
2008/11/22 Ross McKerchar <[EMAIL PROTECTED]> > > Hi All, > > I've just encountered a (admittedly fairly unlikely) sequence of events > that could have lead to puppet breaking a lot of our systems. Most things > are behaving correctly but the end result is unexpected and dangerous, so > although I

[Puppet Users] Did puppetca/puppetmasterd get changed to support a cname, if so when?

2008-11-22 Thread Don Jackson
I would like to add a cname of puppet to the machine that runs puppetmasterd, and have point my puppetds at that, but ran into the same problem that others had a while back, namely: err: Could not retrieve catalog: Certificates were not trusted: hostname was not match with the serve

[Puppet Users] Re: Configuring LDAP clients with puppet

2008-11-22 Thread Ryan Dooley
Sorry for the late reply. Yes, you need to manage /etc/ldap.conf and probably /etc/ssl (or /etc/cacerts) depending on your setup. I do that a little differently at the moment (outside of puppet, though I really should be using puppet). remotefile is a class that I snarfed from http://www.reduct

[Puppet Users] Re: Configuring LDAP clients with puppet

2008-11-22 Thread Ryan Dooley
Another good link for what you are asking for: http://reductivelabs.com/trac/puppet/wiki/Recipes/LDAPClientNSSwitch On Sat, Nov 22, 2008 at 8:06 PM, Ryan Dooley <[EMAIL PROTECTED]> wrote: > Sorry for the late reply. Yes, you need to manage /etc/ldap.conf and > probably /etc/ssl (or /etc/cacerts)