[Puppet Users] Puppet 2.6 Environments

2011-02-23 Thread Douglas Garstang
Oh boy. I'm a bit stuck here. I just moved our puppet config into environments, and now puppet won't serve up any files. (/Stage[yum]/Yum::Client/File[/etc/yum.conf]) Could not evaluate: Error 400 on SERVER: Not authorized to call find on /file_metadata/pax_prod/yum/client/etc/yum.conf Could not

Re: [Puppet Users] external_nodes setting with Environments

2011-02-25 Thread Douglas Garstang
On Fri, Feb 25, 2011 at 5:10 AM, Thomas Bellman wrote: > On 2011-02-25 13:27, Dave Augustus wrote: > > > I have added the following in my puppetmaster.conf file: > > > > [production] > > manifest = $vardir/env/production/manifests/site.pp > > modulepath = > $vardir/env/production/modules:

[Puppet Users] Where to put External Nodes in Multiple Environments?

2011-02-28 Thread Douglas Garstang
All, For those that are using external nodes (as local files) and multiple environments, where do you put the external node files? Ie, do you put them down in the environment itself /etc/puppet/env/env1/manifests/extdata/nodes /etc/puppet/env/env.../manifests/extdata/nodes /etc/puppet/env/envN/ma

Re: [Puppet Users] Where to put External Nodes in Multiple Environments?

2011-02-28 Thread Douglas Garstang
On Mon, Feb 28, 2011 at 12:44 PM, Alan Barrett wrote: > On Mon, 28 Feb 2011, Douglas Garstang wrote: > >> For those that are using external nodes (as local files) and multiple >> environments, where do you put the external node files? >> > > How is it possible

Re: [Puppet Users] Where to put External Nodes in Multiple Environments?

2011-02-28 Thread Douglas Garstang
On Mon, Feb 28, 2011 at 1:17 PM, Alan Barrett wrote: > On Mon, 28 Feb 2011, Douglas Garstang wrote: > >> How is it possible to use external nodes as local files? I was under the >>> impression that node_terminus=exec or node_terminus=ldap were the only ways >&g

[Puppet Users] External node script flagging errors.

2011-03-01 Thread Douglas Garstang
What is the best way to have an external node script that encounters an error fail? What should it do? Should it return a non zero exit code to the OS? (of course, this doesn't seem to be documented anywhere). I just tested the situation where my exteral node script returned 1 to the OS and printed

Re: [Puppet Users] Re: Puppet features

2011-03-03 Thread Douglas Garstang
On Tue, Mar 1, 2011 at 12:52 AM, luke.bigum wrote: > On Feb 28, 7:50 pm, Luis Miguel Silva > wrote: > > Dear all, > > > > I'm a software integrator and i'm currently evaluating Puppet to > > understand how we can potentially integrate our products with it. > > I've been reading documentation on i

Re: [Puppet Users] Updating all packages with Puppet

2011-03-03 Thread Douglas Garstang
On Tue, Mar 1, 2011 at 7:22 PM, Patrick wrote: > > On Mar 1, 2011, at 4:58 PM, Giovanni Bordello wrote: > > Hi folks, > > I'm very new to Puppet and perhaps what I'm trying to do is a trivial > thing. No so much for me though.. > > I use Puppet 2.6 to manage a bunch of CentOS 5 servers. A handful

[Puppet Users] Darned PSON Message!

2011-03-03 Thread Douglas Garstang
I'm sure it must already be a known bug, but I've been getting this message frequently on the clients: Could not retrieve catalog from remote server: Could not intern from pson: source did not contain any PSON! Happens erratically but it's frequency seems to have increased with my upgrade from 2.

Re: [Puppet Users] Re: Darned PSON Message!

2011-03-05 Thread Douglas Garstang
On Fri, Mar 4, 2011 at 9:31 AM, James Turnbull wrote: > Bill Proud wrote: > > Sorry Jed I didn't realise that you didn't know about .puppet > > directories. A .puppet directory is created in your home directory if > > you accidentally run puppet as yourself and not as root. The problem > > that

Re: [Puppet Users] Re: Darned PSON Message!

2011-03-06 Thread Douglas Garstang
On Sun, Mar 6, 2011 at 2:48 AM, Bill Proud wrote: > SSL_write is the function that writes to an SSL connection. Evidently > in this case there was an error - perhaps the connection was lost. > > This error is occurring on multiple clients at regular intervals in a new data centre, sometimes on V

Re: [Puppet Users] Re: Darned PSON Message!

2011-03-06 Thread Douglas Garstang
that there isn't a lot more information here. Is it always > the same error? > > Actually you might have the same .puppet directory problem that I had > but it would have to be in the home directory of whoever last started > puppetmasterd (so not on the client). > > On Mar

Re: [Puppet Users] nodes: internal, external, or LDAP?

2011-03-07 Thread Douglas Garstang
On Mon, Mar 7, 2011 at 4:06 PM, LarsP wrote: > Hello Puppet World - > > My company is in the early phase of building out a configuration > automation solution using Puppet. As we hash out the design, one of > the biggest questions that keeps coming up is how and *where* we > should be defining no

Re: [Puppet Users] Why is it so hard to make a sane nagios server config?

2011-03-12 Thread Douglas Garstang
>> >> > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to > puppet-users+unsubscr...@

Re: [Puppet Users] Re: prerun_command don't stop puppet on error

2011-03-16 Thread Douglas Garstang
On Wed, Mar 16, 2011 at 2:13 AM, Nan Liu wrote: > On Wed, Mar 16, 2011 at 3:48 PM, Victor Mora > wrote: > > I've tried with /bin/false with the same result. You can see and error > > at log file, but it continues with changes: > > > > Mar 16 08:44:27 sistemes puppetd[26894]: Failed to prepare ca

[Puppet Users] puppetca and /etc/puppet/ssl

2011-03-31 Thread Douglas Garstang
All, I have --confdir=/etc/puppet/common in my /etc/init.d/puppetmaster and /etc/init.d/puppet files, vardir set to /var/lib/puppet in /etc/puppet/common/puppet.conf, and yet, every time I run puppetca it creates /etc/puppet/ssl. Anyone know why? Doug. -- You received this message because you a

Re: [Puppet Users] puppetca and /etc/puppet/ssl

2011-03-31 Thread Douglas Garstang
I have ssldir set to $vardir/ssl in /etc/puppet/puppet.conf. On Thu, Mar 31, 2011 at 2:55 PM, Scott Smith wrote: > Set ssldir? > On Mar 31, 2011 1:41 PM, "Douglas Garstang" > wrote: > > All, > > > > I have --confdir=/etc/puppet/common in my /etc/init.d/pu

Re: [Puppet Users] puppetca and /etc/puppet/ssl

2011-03-31 Thread Douglas Garstang
On Thu, Mar 31, 2011 at 3:53 PM, Denmat wrote: > Hi, > > I will assume that you're talking about the master only and not about the > clients that connect to it. > It seems to only be a bug with puppetca. Yes, master only. Did you try using puppetca? > > Do you have two puppet.conf files? One i

[Puppet Users] PSON! Grrr!

2011-04-01 Thread Douglas Garstang
These PSON messages are driving me crazy. It's not unusual to have to restart the client 3 times to get past it. Anyone know the cause? This is a fresh install of the puppetmaster and puppet client on CentOS 5.5 with puppet 2.6.4. Apr 1 17:04:14 rcss01 puppet-agent[1058]: Reopening log filesApr

Re: [Puppet Users] PSON! Grrr!

2011-04-02 Thread Douglas Garstang
On Fri, Apr 1, 2011 at 4:24 PM, Hugo Cisneiros (Eitch) < hugo.cisnei...@gmail.com> wrote: > On Fri, Apr 1, 2011 at 11:07 AM, Douglas Garstang >> wrote: >> > These PSON messages are driving me crazy. It's not unusual to have to >> > restart the client 3 times

[Puppet Users] Passenger complains /etc/puppet/ssl doesn't exist.

2011-04-04 Thread Douglas Garstang
All, I just tried to get Passenger up and running, based on on the docs at: http://projects.puppetlabs.com/projects/1/wiki/Using_Passenger I am seeing this in my Apache error_log whenever a client tries to connect: Could not prepare for execution: Got 2 failure(s) while initializing: change from

[Puppet Users] Re: Passenger complains /etc/puppet/ssl doesn't exist.

2011-04-04 Thread Douglas Garstang
Actually... this may be the cause... my puppet.conf is in a non standard location, and when running puppetmaster, I'm setting --confdir=/etc/puppet/common in /etc/init.d/puppetserver. How can I set this for passenger? Doug. On Mon, Apr 4, 2011 at 10:00 PM, Douglas Garstang wrote: > Al

Re: [Puppet Users] Re: Passenger complains /etc/puppet/ssl doesn't exist.

2011-04-04 Thread Douglas Garstang
On Mon, Apr 4, 2011 at 10:25 PM, Martin Alfke wrote: > On 04/05/2011 07:17 AM, Douglas Garstang wrote: > > Actually... this may be the cause... my puppet.conf is in a non standard > > location, and when running puppetmaster, I'm setting > > --confdir=/etc/pu

Re: [Puppet Users] PSON! Grrr!

2011-04-06 Thread Douglas Garstang
On Wed, Apr 6, 2011 at 8:54 AM, joel.merr...@gmail.com < joel.merr...@gmail.com> wrote: > On Wed, Apr 6, 2011 at 3:22 PM, Gary Larizza wrote: > > > > +1 for the wiki. Jeff McCune actually published the correct version > > combination, which is usually Rack version 1.0.1 and Passenger 2.2.11. I

[Puppet Users] Skipping a module

2011-04-07 Thread Douglas Garstang
I'd like to be able to always include all modules at the top level, but in certain modules, have some logic that uses extlookup to determine if it should be enabled. What's the best way to use if; then; else to exit a module, and stop processing, based on some condition? Doug. -- You received th

[Puppet Users] Certificate Issues.... again

2011-04-10 Thread Douglas Garstang
I don't know what it is with puppet's certificates, but once again, they are behaving strangely. Client is reporting: debug: Using cached certificate for auth01.fre.livegamer.com /usr/lib/ruby/site_ruby/1.8/puppet/ssl/host.rb:166:in `certificate' /usr/lib/ruby/site_ruby/1.8/puppet/ssl/host.rb:227:

[Puppet Users] Facts with mcollective

2011-04-18 Thread Douglas Garstang
All, Just started to use mcollective. I found an example at http://www.semicomplete.com/blog/geekery/puppet-facts-into-mcollective.html: file { "/etc/mcollective/facts.yaml": ensure => file, content => inline_template("<%= scope.to_hash.reject { |k,v| !( k.is_a?(String) && v.is_a?

[Puppet Users] ssh::auth Question

2011-04-30 Thread Douglas Garstang
So... I was looking at the docs for ssh::auth at http://projects.puppetlabs.com/projects/1/wiki/Module_Ssh_Auth_Patterns. It seems like auth.pp runs on the puppet master rather than the client. How does that work exactly? Doug. -- You received this message because you are subscribed to the

Re: [Puppet Users] ssh::auth Question

2011-04-30 Thread Douglas Garstang
On Sat, Apr 30, 2011 at 3:36 PM, Steven Acres wrote: > On Sat, Apr 30, 2011 at 6:21 PM, Douglas Garstang > wrote: > >> So... I was looking at the docs for ssh::auth at >> http://projects.puppetlabs.com/projects/1/wiki/Module_Ssh_Auth_Patterns. >> >> It seem

[Puppet Users] Managing Switches.

2011-05-09 Thread Douglas Garstang
All, I was looking at the new feature of puppet to manage switches, and it says: "A current limitation is that it isn’t possible to have 2 switches with the same interface name" Does this mean that if one switch has an interface called FastEthernet 0/1, that puppet can't manage a second switch w

[Puppet Users] Re: Managing Switches.

2011-05-10 Thread Douglas Garstang
Anyone? Anyone? On Mon, May 9, 2011 at 2:45 PM, Douglas Garstang wrote: > All, > > I was looking at the new feature of puppet to manage switches, and it says: > > "A current limitation is that it isn’t possible to have 2 switches with > the same interface name" &g

[Puppet Users] Device Documentation

2011-05-21 Thread Douglas Garstang
Where can I find documentation for puppet devices? A search of the puppetlabs docs yields almost nothing, and google searches keep returning _MY_ questions about puppet devices. There's something seriously wrong with that picture. Doug -- You received this message because you are subscribed to t

[Puppet Users] Client updates

2011-05-25 Thread Douglas Garstang
I probably waste quite a bit of time each week restarting the puppet client, and logging systems, and tailing the messages file, to see if my puppet changes worked. Is there a better way? How do people normally do this? Sure, I can use puppetrun or mcollective to cause puppet to do a config run on

Re: [Puppet Users] Client updates

2011-05-25 Thread Douglas Garstang
On Wed, May 25, 2011 at 10:16 AM, Brian Cully wrote: > On May 25, 2011, at 1:12 PM, Douglas Garstang wrote: > > > I probably waste quite a bit of time each week restarting the puppet > client, and logging systems, and tailing the messages file, to see if my > puppet changes

Re: [Puppet Users] Client updates

2011-05-25 Thread Douglas Garstang
On Wed, May 25, 2011 at 10:22 AM, Brian Gupta wrote: > Basically the ways I know of: > > 1) Don't run puppet as a daemon, but run it out of cron every X mins. > 2) Setup a cronjob that checks if puppet is running and restart it if not. > 3) Setup a nagios job that checks to see if puppet is runnin

Re: [Puppet Users] Client updates

2011-05-25 Thread Douglas Garstang
On Wed, May 25, 2011 at 10:26 AM, Nathan Clemons wrote: > Mcollective with mc-puppet should work if you patch it to not daemonize > (you'll need to adjust the timeouts as well, of course). Errors running will > bubble up to the list of nodes that failed the run. > > Failed both for syntax erro

Re: [Puppet Users] Client updates

2011-05-25 Thread Douglas Garstang
On Wed, May 25, 2011 at 10:26 AM, R.I.Pienaar wrote: > > > - Original Message - > > Basically the ways I know of: > > > > 1) Don't run puppet as a daemon, but run it out of cron every X mins. > > 2) Setup a cronjob that checks if puppet is running and restart it if > > not. > > 3) Setup a

Re: [Puppet Users] Client updates

2011-05-25 Thread Douglas Garstang
On Wed, May 25, 2011 at 10:35 AM, Nathan Clemons wrote: > Mcollective hides successes and only shows you failures, keeping the signal > to noise ratio very high. > > If you run puppet without daemonizing, anything that causes the config to > not be applied successfully is going to show up as an er

Re: [Puppet Users] Client updates

2011-05-25 Thread Douglas Garstang
On Wed, May 25, 2011 at 10:40 AM, Brian Gupta wrote: > On Wed, May 25, 2011 at 1:29 PM, Douglas Garstang > wrote: > > On Wed, May 25, 2011 at 10:22 AM, Brian Gupta > > wrote: > >> > >> Basically the ways I know of: > >> > >> 1) Don't

Re: [Puppet Users] Client updates

2011-05-26 Thread Douglas Garstang
On Wed, May 25, 2011 at 1:19 PM, Brian Gupta wrote: > Douglas, > > I have to concur with disconnect, now that we are using Foreman, many > of the things we setup in the past to catch these things are now > redundant. I don't know why you "don't like" Foreman, but I have to > say along with our ini

Re: [Puppet Users] Re: Client updates

2011-05-26 Thread Douglas Garstang
On Thu, May 26, 2011 at 10:19 AM, Jake - USPS wrote: > Maybe if you edit /foreman-location/config/settings.yaml and > uncomment :modulepath and set it to your modulepath and then restart > the webserver? This is just an educated guess as I use a standard > location, but that seems like a good sta

[Puppet Users] Resources existing in different operating systems.

2011-06-02 Thread Douglas Garstang
So... I'm thinking about how to have puppet manage different operating systems. It's one thing to use a selector to determine the value of specific resources attribute, but what do you do when a file may not exist on a specific O/S? You can't use a selector in this case. I really don't like the ap

[Puppet Users] Re: Resources existing in different operating systems.

2011-06-02 Thread Douglas Garstang
On Thu, Jun 2, 2011 at 12:36 PM, Douglas Garstang wrote: > So... I'm thinking about how to have puppet manage different operating > systems. It's one thing to use a selector to determine the value of specific > resources attribute, but what do you do when a file may not exist

Re: [Puppet Users] Re: Resources existing in different operating systems.

2011-06-03 Thread Douglas Garstang
On Fri, Jun 3, 2011 at 12:52 AM, Luke Bigum wrote: > Douglas, > > If you don't use a conditional somewhere, how are you going to decide what > resources are declared on what clients? > I never said I didn't want to use conditionals somewhere. > > In that blog example, the classes are loaded b

Re: [Puppet Users] Re: Resources existing in different operating systems.

2011-06-03 Thread Douglas Garstang
On Fri, Jun 3, 2011 at 10:01 AM, Russell Howe wrote: > > -Original Message- > > From: puppet-users@googlegroups.com > > [mailto:puppet-users@googlegroups.com] On Behalf Of Douglas Garstang > > Sent: 03 June 2011 16:21 > > To: puppet-users@googlegroups.com

[Puppet Users] Single and Double Quotes

2011-06-05 Thread Douglas Garstang
The style guide says to use single quotes, except when variables are present in the string, and then double quotes should be used. That bothers me. It means your using two different types of quotes, when just one could be used. I mistakingly used single quotes around a string with a ${variable} in

Re: [Puppet Users] Single and Double Quotes

2011-06-05 Thread Douglas Garstang
> > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to > puppet-users+unsubscr...@googlegrou

[Puppet Users] Split Manifest Across Multiple Lines?

2011-06-06 Thread Douglas Garstang
Is there a way I can split a line in a manifest across multiple lines, ala shell style? ie: $include_postfix_module = extlookup("IncludePostfixModule", \ extlookup("IncludePostfixModule", \ extlookup("IncludePostfixModule", \

[Puppet Users] ! $is_virtual

2011-06-07 Thread Douglas Garstang
All, Running this on a bare metal server. Package doesn't get installed, therefore condition is false. Why? if ! ($is_virtual) { package { 'vlock': ensure => installed; } } [pax] app01 ~:# facter | grep is_virtual is_virtual => false Oh... don

[Puppet Users] Re: Automatically creating subdirectories?

2009-06-19 Thread Douglas Garstang
7;t puppet automatically create all the subdirectories above usr/ > share/openvpn/easy-rsa/2.0 directory for me? If not, do I need to go > and create dependancies for every single node in the directory > hierarchy? That seems a little crazy. Isn't t

[Puppet Users] "Could not find dependency Yumrepo"

2009-08-13 Thread Douglas Garstang
e baseurl=http://192.168.1.21/mrepo/centos4-$basearch/RPMS.base enabled=1 gpgcheck=1 gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4 and, finally: [r...@voip01 yum.repos.d]# yum repolist | grep base base base enabled Wh

[Puppet Users] Re: "Could not find dependency Yumrepo"

2009-08-13 Thread Douglas Garstang
Hi Larry. I don't know why we are using exec to update via yum. This was implemented by come consultants, and it has to be kept this way. It's been working in production for quite some time. I am merely trying to replicate the production setup in a dev environment. Douglas. On Thu, Aug 13, 2009

[Puppet Users] Re: "Could not find dependency Yumrepo"

2009-08-13 Thread Douglas Garstang
 Yumrepo["base"] in your type list. > maybe it was renamed, or not included. > > -L > -- > Larry Ludwig > Reductive Labs > > > > -- Regards, Douglas Garstang http://www.linkedin.com/in/garstang Email: doug.garst...@gmail.com Cell: +1-805-340-5627 --~--~-

[Puppet Users] Re: "Could not find dependency Yumrepo"

2009-08-13 Thread Douglas Garstang
it down? Doug. On Thu, Aug 13, 2009 at 1:12 PM, Larry Ludwig wrote: > > On Aug 13, 2009, at 4:06 PM, Douglas Garstang wrote: > > Larry, > > if you mean that puppet can't find the 'base' repo, it should be there > and accessible. That's why I posted the cont

[Puppet Users] Re: "Could not find dependency Yumrepo"

2009-08-13 Thread Douglas Garstang
Yumrepo["contrib"], Yumrepo["c4-media"] ], } site.pp defines Exec and imports the update module, which calls Exec. Doug. On Thu, Aug 13, 2009 at 1:41 PM, Larry Ludwig wrote: > > On Aug 13, 2009, at 4:32

[Puppet Users] Re: "Could not find dependency Yumrepo"

2009-08-13 Thread Douglas Garstang
Actually, the more I read this, the more it seems to indicate to me that the problem is with the Yumrepo, NOT the Exec. It does say after all "Could not find dependency Yumrepo[base]" ---FOR--- "Exec[yum-update]"... Doug. On Thu, Aug 13, 2009 at 1:56 PM, Douglas Garstang w

[Puppet Users] puppetrun with tags

2009-10-03 Thread Douglas Garstang
I can't seem to get puppetrun to work with the --tag parameter. I've tagged some nodes as staging and production, and when I run the following on the puppetmaster, nothing happens on the client. ~:# puppetrun -d --tag=staging Failed to load ruby LDAP library. LDAP functionality will not be avail

[Puppet Users] External Nodes and storeconfigs

2009-10-04 Thread Douglas Garstang
So... I've got a question post puppet camp. I'm not sure I understand the benefit of external nodes and storeconfigs. If you put node data or other puppet configuration in external sources, it would seem to me that: 1. Your complicating your configuration by essentially putting your puppet conf

[Puppet Users] puppetrun with tags

2009-10-05 Thread Douglas Garstang
I can't seem to get puppetrun to work with the --tag parameter. I've tagged some nodes as staging and production, and when I run the following on the puppetmaster, nothing happens on the client. ~:# puppetrun -d --tag=staging Failed to load ruby LDAP library. LDAP functionality will not be avail

[Puppet Users] puppetbucket.addfile: execution expired

2009-10-08 Thread Douglas Garstang
I'm having some trouble serving out files with puppet. The following is appearing in the log: Oct 8 15:52:42 app1.fr.xxx.com puppetd[7045]: Connection timeout calling puppetbucket.addfile: execution expired My /etc/puppet/fileserver.conf has: [files] path /etc/puppet allow *.fr.xxx.com al

[Puppet Users] genconf generated config aborts

2009-10-13 Thread Douglas Garstang
When I run puppetmasterd with the --genconfig option and use that as my starting puppet.conf file, puppetmasterd dumps the full config to the screen and then aborts. This is currently happening with 0.25 and I was also seeing it with 0.24. What's up with that? I'm trying to get a baseline good wo

[Puppet Users] Re: genconf generated config aborts

2009-10-13 Thread Douglas Garstang
D'oh! Thanks. On Tue, Oct 13, 2009 at 9:53 AM, Paul Lathrop wrote: > > Doug, > > Remove genconfig = true from the puppet.conf file > > --Paul > > On Tue, Oct 13, 2009 at 9:51 AM, Douglas Garstang > wrote: >> >> When I run puppetmasterd with the --gen

[Puppet Users] Re: genconf generated config aborts

2009-10-13 Thread Douglas Garstang
ig = true from the puppet.conf file > > I've often wondered about the utility of having that in the generated > config file, and it's bitten me several times. > > Is there a reason we don't strip it out? > > > >> >> --Paul >> >> On T

[Puppet Users] Puppet 0.25 Client won't start "Retrieved certificate does not match private key"

2009-10-13 Thread Douglas Garstang
I've been tearing my hair out since 1am this morning trying to get the puppet server and client to communicate. The latest chapter in this epic saga has this coming up on the client each time I run puppetd: Could not prepare for execution: Retrieved certificate does not match private key; please

[Puppet Users] Re: genconf generated config aborts

2009-10-13 Thread Douglas Garstang
Agreed. On Tue, Oct 13, 2009 at 11:08 AM, Paul Lathrop wrote: > > On Tue, Oct 13, 2009 at 11:03 AM, Douglas Garstang > wrote: >> >> Please don't strip it out. The documentation is terrible and this at >> least gives me a known good working config. > > Dou

[Puppet Users] Re: Puppet 0.25 Client won't start "Retrieved certificate does not match private key"

2009-10-13 Thread Douglas Garstang
I removed /var/lib/puppet too. On Tue, Oct 13, 2009 at 11:31 AM, Joe McDonagh wrote: > > Douglas Garstang wrote: >> I've been tearing my hair out since 1am this morning trying to get the >> puppet server and client to communicate. >> >> The latest chapter in t

[Puppet Users] Re: Puppet 0.25 Client won't start "Retrieved certificate does not match private key"

2009-10-13 Thread Douglas Garstang
n Tue, Oct 13, 2009 at 12:24 PM, Douglas Garstang wrote: > I removed /var/lib/puppet too. > > On Tue, Oct 13, 2009 at 11:31 AM, Joe McDonagh > wrote: >> >> Douglas Garstang wrote: >>> I've been tearing my hair out since 1am this morning trying to get

[Puppet Users] Re: Puppet 0.25 Client won't start "Retrieved certificate does not match private key"

2009-10-13 Thread Douglas Garstang
lvuwUWe+s5XI+zczcuDgK > sEduhdUNYH1bjArNQOOr8htICeBG6htzomsKll72E2sAsKZ4TDrUPg== > =FkY5 > -END PGP SIGNATURE- > > > > -- Regards, Douglas Garstang http://www.linkedin.com/in/garstang Email: doug.garst...@gmail.com Cell: +1-805-340-5627 --~--~-~--~~-

[Puppet Users] Puppetmaster config

2009-10-13 Thread Douglas Garstang
I'm getting really really frustrated with puppet. Why is it that when I install the puppet-server RPM, my default config file in /etc/puppet/puppet.conf has a [puppetd] section and not a [puppetmasterd] section? Isn't that what the puppetmaster looks for? The output from --genconfig generates a c

[Puppet Users] Re: Puppet 0.25 Client won't start "Retrieved certificate does not match private key"

2009-10-13 Thread Douglas Garstang
Administration (http://tinyurl.com/linuxadmin) > * Pulling Strings with Puppet (http://tinyurl.com/pupbook) > * Pro Nagios 2.0 (http://tinyurl.com/pronagios) > * Hardening Linux (http://tinyurl.com/hardeninglinux) > > > > -- Regards, Douglas Garstang http://www.linkedin.com/in/g

[Puppet Users] Re: Puppetmaster config

2009-10-14 Thread Douglas Garstang
Can anyone in the know please help to clear this up? Does puppetmaster look for [puppetd] or [puppetmasterd] in /etc/puppet/puppet.conf ??? Doug. On Wed, Oct 14, 2009 at 5:37 AM, Nigel Kersten wrote: > > On Tue, Oct 13, 2009 at 4:07 PM, Douglas Garstang > wrote: >> >&g

[Puppet Users] Re: Puppetmaster config

2009-10-14 Thread Douglas Garstang
On Wed, Oct 14, 2009 at 9:35 AM, Nigel Kersten wrote: > > On Wed, Oct 14, 2009 at 9:31 AM, Douglas Garstang > wrote: >> >> Can anyone in the know please help to clear this up? >> >> Does puppetmaster look for [puppetd] or [puppetmasterd] in >> /etc/puppe

[Puppet Users] Puppet 0.25

2009-10-14 Thread Douglas Garstang
For what it's worth, I've been having a heck of a time getting puppetmaster and puppet to communicate over the last few days. I just went back to puppet 0.24.8 and it worked on the _very_ first attempt. In both instances the config files were generated from genconf. Methinks 0.25 is broken in some

[Puppet Users] CA Not Found

2009-10-14 Thread Douglas Garstang
Can someone tell me what this means? I am getting this in /var/log/puppet/masterhttp.log on the server. [2009-10-14 15:07:35] DEBUG accept: 10.10.1.23:33626 [2009-10-14 15:07:35] ERROR `/production/certificate/ca' not found. [2009-10-14 15:07:35] DEBUG close: 10.10.1.23:33626 This is with puppet

[Puppet Users] Service bug?

2009-10-15 Thread Douglas Garstang
I've got a host here where I am trying to ensure that syslog-ng is running, and not surprisingly that syslog is NOT running. My manifest has... class syslog_ng { package { "syslog-ng": name => "syslog-ng", ensure => installed; } service { "syslog": ensure =>

[Puppet Users] Module Dependancy

2009-10-20 Thread Douglas Garstang
I have this... node base_node { } node child_node inherits base_node { Yumrepo { mirrorlist => absent, enabled => 0, gpgcheck => 1 } yumrepo { "Core": enabled => 1, name => "Core", descr => "Software", ba

[Puppet Users] Module Dependancy

2009-10-20 Thread Douglas Garstang
I have this... node base_node { } node child_node inherits base_node { Yumrepo { mirrorlist => absent, enabled => 0, gpgcheck => 1 } yumrepo { "Core": enabled => 1, name => "Core", descr => "Software", baseurl => "h

[Puppet Users] Module include order?

2009-10-23 Thread Douglas Garstang
I have this... node test_node inherits basenode_centos_5 { include yum include yum-priority include mysql_client include mysql_server } Puppet seems to be executing stuff from the mysql_client and mysql_server modules before the yum module. I had assumed that modules were execute

[Puppet Users] Re: Module include order?

2009-10-23 Thread Douglas Garstang
I'm sure there's other ways to go about this, so other feel free to > pitch in :) > > On Oct 23, 2009, at 3:12 PM, Douglas Garstang wrote: > >> >> I have this... >> >> node test_node inherits basenode_centos_5 { >>    include yum >>    include yu

[Puppet Users] Re: Module include order?

2009-10-23 Thread Douglas Garstang
. and I am DEFINITELY seeing puppet try and install objects from ldap, mysql and yum-priority BEFORE the yum module is complete. Douglas. On Fri, Oct 23, 2009 at 1:22 PM, Douglas Garstang wrote: > Awesome info. Thanks Carl! > > On Fri, Oct 23, 2009 at 1:18 PM, Carl Caum wrote: >> >&

[Puppet Users] Re: Module include order?

2009-10-23 Thread Douglas Garstang
require is broken.  It will work in 0.25.1 > though. > > > On Oct 23, 2009, at 4:18 PM, Douglas Garstang wrote: > >> >> Actually, that doesn't seem to be what's happening Carl. >> >> I have this... >> >> node tst_basenode { >&g

[Puppet Users] Re: Module include order?

2009-10-23 Thread Douglas Garstang
Including modules in a specific order would be nice too. It's certainly easier to read and more intuitive. :) On Fri, Oct 23, 2009 at 2:50 PM, wrote: > > hello, > > - "Douglas Garstang" wrote: > >> Weird. You'd think this would be common problem nu

[Puppet Users] Re: Module include order?

2009-10-23 Thread Douglas Garstang
elease], File[/etc/yum/pluginconf.d/priorities.conf] => Package[centos-release] when I put this into my yum module: Package { require => [ Class["yum"], Class["yum-priority"] ] } G On Fri, Oct 23, 2009 at 3:03 PM, Douglas Garstang wrote: > Inclu

[Puppet Users] Object Dependancies

2009-10-24 Thread Douglas Garstang
All, I've been putting a lot of puppet pieces together over the last few days, and I've realised, I think, that you _REALLY_ need to be explicit with your object dependancies. It looks like puppet just drags all modules, all nodes, and everything else into one giant namespace and executes them in

[Puppet Users] Explicit Repo, Package ordering

2009-10-24 Thread Douglas Garstang
Oh boy. Puppet is frustrating the heck out of me. I have this below node tst_basenode { include yum Package { require => [ Yumrepo["CentOS-Base"], Yumrepo["EPEL-Core"], ... ] } } node tst_childnode inherits tst_basenode {

[Puppet Users] Re: Object Dependancies

2009-10-24 Thread Douglas Garstang
inux System Administration (http://tinyurl.com/linuxadmin) > * Pulling Strings with Puppet (http://tinyurl.com/pupbook) > * Pro Nagios 2.0 (http://tinyurl.com/pronagios) > * Hardening Linux (http://tinyurl.com/hardeninglinux) > > > > -- Regards, Douglas Garstang http://www.li

[Puppet Users] Re: Object Dependancies

2009-10-24 Thread Douglas Garstang
T be installed first, after yum. If ldap is only partialled installed, everything goes to hell in a handbasket. Even a groupadd excited by yum will just hang, so ldap needs to go in right after yum, and before anything else. Doug On Sat, Oct 24, 2009 at 5:35 PM, James Turnbull wrote: > > 2

[Puppet Users] Require Class

2009-10-24 Thread Douglas Garstang
Can someone tell me what a require => Class actually does? The documentation on this really isn't clear. The language tutorial at http://reductivelabs.com/trac/puppet/wiki/LanguageTutorial says: "Like resources, you can also create relationships with classes like so: class apache { service

[Puppet Users] Require Class?

2009-10-24 Thread Douglas Garstang
Can someone tell me what a require => Class actually does? The documentation on this really isn't clear. The language tutorial at http://reductivelabs.com/trac/puppet/wiki/LanguageTutorial says: "Like resources, you can also create relationships with classes like so: class apache { service {

[Puppet Users] Complicated?

2009-10-25 Thread Douglas Garstang
Is it really this complicated? Follow my logic here... In my scenario, it's critical that my yum repositories get installed by puppet to /etc/yum.repos.d first before anything else happens. After this, the yum-priorities rpm must be installed with yum, followed by ldap, since the installation of

[Puppet Users] Re: node manifest best practices

2009-10-25 Thread Douglas Garstang
datory when things grow. See > http://reductivelabs.com/trac/puppet/wiki/ExternalNodes for more > informations. I REALLY disagree with this. How do you version control your nodes if they are stored externally? -- Regards, Douglas Garstang http://www.link

[Puppet Users] MySQL Restart

2009-10-25 Thread Douglas Garstang
I've got a mostly working puppet manifest for mysql, except for one problem. I'm using the RPM from the MySQL web site, and the packagers of this RPM in their infinite wisdom decided that the mysql service should be automatically started when the RPM was installed. This confuses puppet. The RPM i

[Puppet Users] Re: MySQL Restart

2009-10-25 Thread Douglas Garstang
tupid. I suppose that's why puppet was failing earlier, since a 'service mysql status' would have been stating mysql wasn't running. Good grief! Doug On Sun, Oct 25, 2009 at 5:56 PM, R P Herrold wrote: > > On Sun, 25 Oct 2009, Douglas Garstang wrote: > >> I

[Puppet Users] Re: MySQL Restart

2009-10-25 Thread Douglas Garstang
I don't believe 'pattern' is used to stop/start the service, only to help recognise if it's running when hasstatus is not used. On Sun, Oct 25, 2009 at 6:14 PM, R P Herrold wrote: > > On Sun, 25 Oct 2009, Douglas Garstang wrote: > >> Actually, putting this

[Puppet Users] Using before=> in a definition...

2009-11-03 Thread Douglas Garstang
I hope I haven't dug myself into a corner here... How can I make sure that /some/file.xml is created BEFORE the jboss-tfel0 service is started? I can't use before => in the file{} in the jboss class because it doesn't exist there. define create_jboss_inst($inst, $version, $naming_port) {

[Puppet Users] Using before=> in a definition...

2009-11-03 Thread Douglas Garstang
I hope I haven't dug myself into a corner here... How can I make sure that /some/file.xml is created BEFORE the jboss-tfel0 service is started? I can't use before => in the file{} in the jboss class because it doesn't exist there. define create_jboss_inst($inst, $version, $naming_port) {

[Puppet Users] Re: SSL Makes My Brain Bleed

2009-11-07 Thread Douglas Garstang
Sorry James... by the time I tossed in the towel I was a quivering sweaty blob. Doug. On Fri, Nov 6, 2009 at 10:22 PM, James Turnbull wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Douglas Garstang wrote: >> Seems like there are LOTS and LOTS of problems w

[Puppet Users] Resouce names with variables.

2009-11-07 Thread Douglas Garstang
This seems like a bug to me. In the example below, puppet complains: Nov 7 15:32:28 gumby puppetd[17245]: Configuration could not be instantiated: Could not find dependency File[/opt/jboss/jboss-current/conf/tfel-bindings.xml] for Service[jboss-tfel2] at /etc/puppet/modules/jboss/manifests/init.

[Puppet Users] Re: Resouce names with variables.

2009-11-07 Thread Douglas Garstang
definition. I can't >> do that. I have to use the $jboss_version variable. > > > use ${jboss_version} instead of $jboss_version. > > http://reductivelabs.com/trac/puppet/wiki/LanguageTutorial#quoting > > cheers pete > > > > -- Regards, Douglas Garsta

[Puppet Users] Re: Resouce names with variables.

2009-11-07 Thread Douglas Garstang
Oh, and I don't want to use $jboss_version. I want to use $version. That was the whole point. On Sat, Nov 7, 2009 at 4:07 PM, Douglas Garstang wrote: > Peter, > > Same error... > > Nov  7 16:06:57 gumby puppetd[17245]: Configuration could not be > instantiated: Could not

<    1   2   3   4   5   6   7   >