Issue #4964 has been reported by Stefan Schulte.

----------------------------------------
Bug #4964: wrong mode for directory /etc/puppet
http://projects.puppetlabs.com/issues/4964

Author: Stefan Schulte
Status: Unreviewed
Priority: Normal
Assignee: 
Category: agent
Target version: 
Affected version: 2.6.1
Keywords: 
Branch: 


When I first start Puppet on a new node (2.6.1) i get the following error when 
umask is set to 077:

err: Could not request certificate: Could not write 
/etc/puppet/ssl/private_keys/XX.pem to privatekeydir: Permission denied - 
/etc/puppet/ssl/private_keys/XX.pem

The puppet agent creates /etc/puppet with root:sys (on HP-UX) and 
/etc/puppet/ssl with ownership set to puppet:sys. It looks like puppet tries to 
create the certificate /etc/puppet/ssl/private_keys/XX.pem as the user puppet. 
But that cannot work, when /etc/puppet doesnt allow others to traverse that 
directory (in my case it was created as rwx------)

So when puppet creates /etc/puppet it should look for the correct rights (e.g. 
755)


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to