sorry Michael I should be referring to the "kickstart.ps1" script and not bootstrap. Kickstart can be found if you enable agent checks for a host.
Scott. On Mon, Mar 20, 2017 at 6:45 AM, Michael Friedrich <michael.friedr...@icinga.com> wrote: > >> On 20 Mar 2017, at 13:41, Scott <sst...@gmail.com> wrote: >> >> I was able to reproduce the problem in my lab however was not able to >> fix the problem in my DEV environment.... I moved all the certs and >> run 'icinga2 node wizard' which seemed to generate a new salt. I then >> restarted icinga2 and generated a new pki ticket for my endpoint still >> seeing the self signed error in the log. The master also still fails >> to send or get anything from this node. I have tried using the >> bootstrap script and the icinga2 wizard on the endpoint. >> > > I’d like to learn about the mentioned bootstrap.ps1 - I haven’t seen such in > the Icinga repos, do you have a URL? > > Kind regards, > Michael > >> Looking at the ca cert it seems identical to ones that are working. >> At this point I'm guessing a problem with the API? >> >> Thanks for your reply. >> >> Scott. >> >> On Mon, Mar 20, 2017 at 3:23 AM, Michael Friedrich >> <michael.friedr...@icinga.com> wrote: >>> >>>> On 17 Mar 2017, at 20:29, Scott <sst...@gmail.com> wrote: >>>> >>>> Hi Group. >>>> >>>> We are using the bootstrap powershell >>> >>> What’s that? >>> >>>> and when the certificates get >>>> created we are seeing this in our Icinga2.log: >>>> >>>> [2017-03-17 13:22:01 -0600] information/ApiListener: New client >>>> connection for identity 'ca1om01d.XXX.com' from [10.1.18.175]:57660 >>>> (certificate validation failed: code 18: self signed certificate) >>>> [2017-03-17 13:22:01 -0600] warning/JsonRpcConnection: API client >>>> disconnected for identity 'ca1om01d.XXX.com' >>>> >>>> It seems that all new hosts are causing this error. >>> >>> Until they request a ticket which sends them a signed certificate, that’s >>> perfectly valid. Is that the case for your clients? >>> >>> Kind regards, >>> Michael >>> >>>> >>>> Regards, >>>> >>>> Scott. >>>> _______________________________________________ >>>> icinga-users mailing list >>>> icinga-users@lists.icinga.org >>>> https://lists.icinga.org/mailman/listinfo/icinga-users >>> >>> _______________________________________________ >>> icinga-users mailing list >>> icinga-users@lists.icinga.org >>> https://lists.icinga.org/mailman/listinfo/icinga-users >> _______________________________________________ >> icinga-users mailing list >> icinga-users@lists.icinga.org >> https://lists.icinga.org/mailman/listinfo/icinga-users > > _______________________________________________ > icinga-users mailing list > icinga-users@lists.icinga.org > https://lists.icinga.org/mailman/listinfo/icinga-users _______________________________________________ icinga-users mailing list icinga-users@lists.icinga.org https://lists.icinga.org/mailman/listinfo/icinga-users
