On Mar 19, 2009, at 4:56 PM, Trevor Hemsley wrote:
>
> I tried it because I wanted to change the perms on
> /etc/puppet/puppet.conf to 600.
>
> class puppetperms
> {
> file {"/etc/puppet/puppet.conf":
> owner => root,
> group => root,
> mode => 600
> }
> }
You should be able to do this with something like:
# puppet.conf
configfile = /etc/puppet/puppet.conf{owner = root, group = ...}
I'm typing from not-very-good memory here; I don't remember if that's
the right param, or if you need '=' or '=>' here. The
ConfigurationReference should make both clear.
>
> I ran puppetd --test --tags puppetperms on the puppetmaster and got
> this in syslog:
>
> puppetd[6381]:
> (//Node[infra]/puppetperms/File[/etc/puppet/puppet.conf]/mode) mode
> changed '644' to '600'
> puppetd[6381]: Finished catalog run in 7.08 seconds
> puppetmasterd[26866]: Reparsing /etc/puppet/puppet.conf
>
> The next run of puppetd reported
>
> puppetd[6562]: (/File[/var/lib/puppet/facts]) Failed to generate
> additional resources during transaction: Could not connect to puppet
> on
> port 8140
> puppetd[6562]: (/File[/var/lib/puppet/facts]) Failed to retrieve
> current
> state of resource: Could not connect to puppet on port 8140 Could not
> describe /facts: Could not connect to puppet on port 8140
>
> and puppetmasterd was dead.
>
> A restart of puppetmaster and it seems fine with the corrected
> permissions. But if I change the perms back to a more relaxed setting
> and rerun puppetd --test --tags puppetperms then it corrects them
> again
> then crashes.
>
> Puppet 0.24.7 on RHEL 5.3 x86_64.
Please file that as a bug. It's crazy. Please include stack traces
and debugging on the server if you can get them.
--
Nothing is impossible for the man who doesn't have to do it himself.
-- A. H. Weiler
---------------------------------------------------------------------
Luke Kanies | http://reductivelabs.com | http://madstop.com
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---
