Hi Group,

I am currently running 2 clusters with foreman, puppetserver 4 and 
puppetdb. Almost everything is working perfectly, only deleting hosts in 
foreman throws a 

Error: Could not deactivate host on PuppetDB: SSL_connect SYSCALL returned=5 
errno=0 state=unknown state

on the foreman page. The other integration works fine, and for example on 
the cmd I can do a 



[email protected]:/etc/puppetlabs/puppetdb# puppet node status 
atf31.XXXX.com

Currently active
Last catalog: 2017-02-01T21:27:08.832Z
Last facts: 2017-02-01T21:27:06.390Z
[email protected]:/etc/puppetlabs/puppetdb

or

[email protected]:/etc/puppetlabs/puppetdb# puppet node deactivate 
dev-a.XXXX.com <http://dev-a.cl1.audisto.com> 
Submitted 'deactivate node' for dev-atf13.XXXX.com with UUID e6e79475-XXXX-
45aa-7777-157fc645e001
[email protected]:/etc/puppetlabs/puppetdb# 


which then shows the inactive host on Monitor -> Puppet DB Dashboard under 
"Inactive Nodes in the population"

I already tried puppetdb ssl-setup, also with -f to force copying, and I 
also tried the key/truststore thing with the (I guess) correct certificates 
from puppetserver itself.

Can someone maybe answer the question WHICH certificates do I have to use 
in puppetdb configuration, or isnt it possible in the setup we run here ? 

- puppetserver 2.7.2-1puppetlabs1
- puppetdb 4.3.0-1puppetlabs1
- foreman 1.14.0-1
- ruby-puppetdb-foreman 2.0.0-1

foreman puppetdb settings under Administer -> Settings -> Puppetdb 

("puppet" is aliassed to 127.0.0.1 in /etc/hosts on the server)
puppetdb_address https://puppet:8081/pdb/cmd/v1
puppetdb_dashboard_address http://puppet:8080/pdb/dashboard
puppetdb_enabled Yes

we also have in foreman/settings.yaml

:puppetdb: 
  :enabled: false 
  :address: 'https://puppet:8081/pdb/cmd/v1' 
  :dashboard_address: 'http://puppet:8080/pdb/dashboard' 
  :puppetdb_ssl_ca_file: '/etc/puppetlabs/puppet/ssl/
certs/ca.pem' 
  :puppetdb_ssl_certificate: 
'/etc/puppetlabs/puppet/ssl/certs/install.XXXX.com.pem' 
  :puppetdb_ssl_private_key: 
'/etc/puppetlabs/puppet/ssl/private_keys/install.XXXX.com.pem' 

As I said, all the rest seems to work fine, only deleting hosts doesnt work.

We would really appreciate if someone could shed some light into this 

thanks in advance, Oliver 

-- 
You received this message because you are subscribed to the Google Groups 
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.

Reply via email to