On Fri, Feb 12, 2010 at 8:50 AM, James Cammarata <[email protected]> wrote:
> > Trying to setup a sandbox environment, and I'm running into some issues. > When I run the system in --noop mode, everything works as it should (long > list of options truncated to ...): > > [r...@kvm001 ~]# puppetd ... --noop > info: Caching catalog at /var/lib/puppet/localconfig.yaml > notice: Starting catalog run > notice: > //dev_server/basenode/role_general/ntpd/File[/etc/localtime]/ensure: is > file, should be link (noop) > ... > But when I run it without --noop, this happens: > > [r...@kvm001 ~]# puppetd ... > info: Caching catalog at /var/lib/puppet/localconfig.yaml > notice: Starting catalog run > warning: Certificate validation failed; consider using the certname > configuration option > err: //dev_server/basenode/role_general/ntpd/File[/etc/localtime]/ensure: > change from file to link failed: Certificates were not trusted: certificate > verify failed > ... > > that is strange, I know that puppetd does not create certificates when running with --noop mode. Seems like it could be related. Does this machine have a signed certificate? > I've verified the servers are sync'd in time (both running NTP from the > same servers), and I've verified that the hostnames all match up. These > are VM's running on a private network, but I've got the VM's in the > puppetmaster's hosts file, so it can resolve them correctly, and the VM's > have matching /etc/hosts files as well, so I don't think name resolution is > the issue. > > > Any ideas? > I would try running the following on the puppet server: >puppetca --list --all and make sure that the names of all of the certificates are what you expect. > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]<puppet-users%[email protected]> > . > For more options, visit this group at > http://groups.google.com/group/puppet-users?hl=en. > > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
