Issue #13340 has been updated by Stefan Schulte.
If puppet runs for the first time and you do not have your final `puppet.conf`
in place puppet might first create the SSL Key in `/etc/puppet/ssl`. And I am
not sure what happens if puppet creates a key but is not able to send the
certificate request. But you said that you tried to remove
`/var/lib/puppet/ssl` (so the client will create a fresh certificate) with no
effect.
So let's concentrate on `Invalid group: 0` first. I'd like to now where the
error is raised so can you please run
<pre>
# puppet agent --test --trace
</pre>
I suspect that the following may not work as expected on your system:
<pre>
# irb
irb(main):001:0> require 'etc'
=> true
irb(main):002:0> Etc.getgrgid(0).name
=> "root"
irb(main):003:0> Etc.getgrnam('root').gid
=> 0
</pre>
----------------------------------------
Bug #13340: Puppet agent doesn't properly get certificate ubuntu client centos
puppetmaster
https://projects.puppetlabs.com/issues/13340#change-58871
Author: Banio Carpenter
Status: Needs More Information
Priority: Urgent
Assignee: Banio Carpenter
Category:
Target version:
Affected Puppet version:
Keywords:
Branch:
I have a CentOS 5.8 puppetmaster running:
puppet: 2.7.12
ruby: 1.8.5
facter: 1.6.6
kernel: 2.6.18-274.18.1.el5xen
And a Ubuntu 10.04.4 client running:
puppet: 2.7.12
ruby: 1.8.7
facter: 1.6.6
kernel: 2.6.32-343-ec2
When I try to connect for the first time. (I have this server in autosign and
sites). This is what I get:
Mar 22 21:14:10 ip-10-140-2-112 puppet-agent[629]: Reopening log files
Mar 22 21:14:10 ip-10-140-2-112 puppet-agent[629]: Could not request
certificate: getaddrinfo: Name or service not known
Mar 22 21:14:23 ip-10-140-2-112 puppet-agent[710]: Reopening log files
Mar 22 21:14:26 ip-10-140-2-112 puppet-agent[710]: Could not request
certificate: Could not write /var/lib/puppet/ssl/private_keys/myserver.com.pem
to privatekeydir: Invalid group: 0
The directory /var/lib/puppet/ssl is owned by puppet, so perms are good. I
have tried this with more than one client. I tried delete everything in
/var/lib/puppet/ssl and get the same result.
>From a Centos client running 2.7.12 it works fine.
Let me know if you need any more info.
--
You have received this notification because you have either subscribed to it,
or are involved in it.
To change your notification preferences, please click here:
http://projects.puppetlabs.com/my/account
--
You received this message because you are subscribed to the Google Groups
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/puppet-bugs?hl=en.