Issue #13340 has been updated by Banio Carpenter.

I figured out that the very first "Name or service not known" error is just 
from the agent running on startup before the puppet.conf gets changed, so we 
can ignore that part of my initial post.  Subsequent executions only produce 
this error:

# puppetd -t
info: Creating a new SSL key for myserver.com
err: Could not request certificate: Could not write 
/var/lib/puppet/ssl/private_keys/myserver.com.pem to privatekeydir: Invalid 
group: 0
Exiting; failed to retrieve certificate and waitforcert is disabled

puppet is not able to create /var/lib/puppet/ssl/private_keys/myserver.com.pem 
for some reason.


----------------------------------------
Bug #13340: Puppet agent doesn't properly get certificate ubuntu client  centos 
puppetmaster 
https://projects.puppetlabs.com/issues/13340#change-58726

Author: Banio Carpenter
Status: Needs More Information
Priority: Urgent
Assignee: Banio Carpenter
Category: 
Target version: 
Affected Puppet version: 
Keywords: 
Branch: 


I have a CentOS 5.8 puppetmaster running:
puppet: 2.7.12
ruby: 1.8.5
facter: 1.6.6
kernel: 2.6.18-274.18.1.el5xen

And a Ubuntu 10.04.4 client running:
puppet: 2.7.12
ruby: 1.8.7
facter: 1.6.6
kernel: 2.6.32-343-ec2

When I try to connect for the first time.  (I have this server in autosign and 
sites). This is what I get:

Mar 22 21:14:10 ip-10-140-2-112 puppet-agent[629]: Reopening log files
Mar 22 21:14:10 ip-10-140-2-112 puppet-agent[629]: Could not request 
certificate: getaddrinfo: Name or service not known
Mar 22 21:14:23 ip-10-140-2-112 puppet-agent[710]: Reopening log files
Mar 22 21:14:26 ip-10-140-2-112 puppet-agent[710]: Could not request 
certificate: Could not write /var/lib/puppet/ssl/private_keys/myserver.com.pem 
to privatekeydir: Invalid group: 0

The directory /var/lib/puppet/ssl is owned by puppet, so perms are good.  I 
have tried this with more than one client.  I tried delete everything in 
/var/lib/puppet/ssl and get the same result.

>From a Centos client running 2.7.12 it works fine.

Let me know if you need any more info.


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to