- RHEL 5.1
- Puppet 0.24.7
- Puppetmaster and client on the same host

This is all puppet-code for node "mynode" :

node 'mynode' {
        service { iptables:
                ensure => stopped,
        }
        service { crond:
                ensure => stopped,
        }

}

[r...@mynode]# service iptables start
Flushing firewall rules:                                   [  OK  ]
Setting chains to policy ACCEPT: filter                    [  OK  ]
Unloading iptables modules:                                [  OK  ]
Applying iptables firewall rules:                          [  OK  ]

[r...@mynode# service crond start
Starting crond:                                            [  OK  ]

[r...@mynode]# puppetd  --server mynode --test
info: Caching catalog at /var/lib/puppet/localconfig.yaml
notice: Starting catalog run
notice: //Node[mynode]/Service[crond]/ensure: ensure changed 'running'
to 'stopped'
notice: Finished catalog run in 0.37 seconds

[r...@mynode]# service crond status
crond is stopped

[r...@mynode]# service iptables status
Table: filter
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination
1    DROP       tcp  --  0.0.0.0/0            0.0.0.0/0           tcp
dpt:80

Chain FORWARD (policy DROP)
num  target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination

[r...@mynode]#


As you can see I first start crond and iptables, then execute puppet,
and finally check the result.
Crond stops, but not iptables even if that is what I (think I)
specified in the manifest.

Do you have any suggetions for how I can solve this?

Thanks,

Erling



Erling


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to