Hi, Changing the ca means that every node signed with one of the other two will need to regenerate its cert and ask for be signed again(including both not ca puppet masters)
In the puppet masters that are not a ca you should add the 'ca' and 'ca_server' parameters in the puppet.conf. stop puppet (both agent and master) remove all the certs info, generate the certs again ( puppet agent -t will do the trick) , sign them from the ca and start puppet. Then you should repeat this steps ( stop agent, remove certs, start agent, sign cert) for every single node that were pointing to the not ca puppet masters. I thing more or less these are the steps. Regards, El 14/07/2014 23:47, "huhm4n" <oj.man...@gmail.com> escribió: > I have three puppet masters with separate CA on each and with their own > database. I want to make one as the CA server and have the other two point > it, how would i do that? I was trying this page > http://docs.puppetlabs.com/guides/scaling_multiple_masters.html but I > cannot follow the steps. Is there something I am missing out here? Thanks > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to puppet-users+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/puppet-users/a7d29a84-8e48-4718-894e-9524f01878fa%40googlegroups.com > <https://groups.google.com/d/msgid/puppet-users/a7d29a84-8e48-4718-894e-9524f01878fa%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/CAF_B3deOk6pB7OHE7d8eoYUs%3DoFDAHMoORYMPiKeUNqpD9jrBw%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
