On Fri, July 23, 2010 11:32, Jeff McCune wrote: > On Thu, Jul 22, 2010 at 4:20 PM, Patrick Mohr <[email protected]> wrote: >>> On the client, >>> >>> [r...@prc-mn-lnx01 ~]# puppetd --server wrkapp00.esteemedemployer.local >>> --waitforcert 60 --test >>> notice: Ignoring --listen on onetime run >>> err: Could not retrieve catalog from remote server: certificate verify >>> failed >>> warning: Not using cache on failed catalog >>> err: Could not retrieve catalog; skipping run >>> >>> (Ping from the client shows the name is resolving to the IP I expect it >>> to; that it's actually talking to the server I checked certificate >>> names >>> on.) > > Are the clocks between the two machines in sync? The agent node may > think one of the certificates is not yet valid based on time.
Yes; in one case the client and the server are the same, and in the other the client is a xen guest on the server. So the clocks are *precisely* synced, in fact :-). -- David Dyer-Bennet, [email protected]; http://dd-b.net/ Snapshots: http://dd-b.net/dd-b/SnapshotAlbum/data/ Photos: http://dd-b.net/photography/gallery/ Dragaera: http://dragaera.info -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
