Do you happen to have any specific SSH configuration on the client or the server side? Do you use FreeIPA(IPA) or have SSSD configured on the client/server?
On Thursday, December 3, 2015 at 1:53:08 PM UTC+2, James Denton wrote: > > Hello > > I am looking for some help as im finding it quite hard to get support from > the web that relates to my issue(s). > > At the moment i have setup a Foreman server 1.9 (Dev1) and a Foreman-Proxy > 1.9 (Dev2) on a seperate server. As a bit of background this is because > eventually the Proxy Dev2 server will reside in an isolated network and be > used to build, configure (with puppet) clients that also reside in the same > isolated network as they will not have access to the master foreman server > directly. Currently i have a test client (call it Test1) that is configured > to use Dev2 (the proxy) for puppet runs etc. Right now they are all on the > same network for test purposes. The puppet version used is 3.x > > At the moment my main issue is: > > - Manually running puppet runs (via the proxy over SSH) from the Foreman > Master (Dev1) from the frontend to the client server Test1 shows from the > front end that the execution of puppet was successful however no puppet run > seems to be ran on the client. > > When i look at the logs on Dev2 Proxy after hitting the "run puppet" on > Dev1 master I see the following: > > D, [2015-12-03T11:45:48.612930 #1305] DEBUG -- : verifying remote client > XX.XX.XX.XX against trusted_hosts dev1.com dev2.com > <http://dev1.comdev2.ebrd.com> > D, [2015-12-03T11:45:48.614280 #1305] DEBUG -- : about to execute: > /usr/bin/ssh -l root -i /etc/foreman-proxy/id_rsa test1.com > /usr/bin/puppet\ agent\ --onetime\ --no-usecacheonfailure > 10.102.245.195 - - [03/Dec/2015 11:45:48] "POST /run HTTP/1.1" 200 - 0.0042 > > This doesnt work. > > However if i manually run the following on the Dev2 proxy: > > /usr/bin/ssh -l root -i /etc/foreman-proxy/id_rsa test1.com > /usr/bin/puppet\ agent\ --onetime\ --no-usecacheonfailure > > It performs the puppet run on the client. > > Any help at this stage would be greatly appreciated!!! > -- You received this message because you are subscribed to the Google Groups "Foreman users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/foreman-users. For more options, visit https://groups.google.com/d/optout.
