Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Thomas Kishel commented on PUP-1391 Re: puppet device cannot create certs when run as root Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Rick Sherman commented on PUP-1391 Re: puppet device cannot create certs when run as root Thomas Kishel that was handled in PUP-8183 Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Thomas Kishel commented on PUP-1391 Re: puppet device cannot create certs when run as root With this change, we could remove references to '--user=root' from the 5.4 version of: https://puppet.com/docs/puppet/5.3/man/device.html Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Rick Sherman updated an issue Puppet / PUP-1391 puppet device cannot create certs when run as root Change By: Rick Sherman Release Notes Summary: `puppet device` unable to create certificates when run as root Previous versions of Puppet required that `--user=root` be passed to `puppet device` when creating certificates, even if the command was being executed by root. This issue has been resolved, and no longer requires the flag. Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title
Rick Sherman updated an issue
Puppet / PUP-1391
puppet device cannot create certs when run as root
Change By:
Rick Sherman
Comment:
Previous versions of Puppet required that {{--user=root}} be passed to {{puppet device}} when creating certificates, even if the command was being executed by root. This issue has been resolved, and no longer requires the flag.
Add Comment
This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db)
--
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at https://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Rick Sherman updated an issue Puppet / PUP-1391 puppet device cannot create certs when run as root Previous versions of Puppet required that --user=root be passed to puppet device when creating certificates, even if the command was being executed by root. This issue has been resolved, and no longer requires the flag. Change By: Rick Sherman Release Notes Summary: `puppet device` unable to create certificates when run as root Release Notes: Bug Fix Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Kenn Hussey commented on PUP-1391 Re: puppet device cannot create certs when run as root Rick Sherman please provide release notes for this issue, if needed. Thanks! Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Rick Sherman updated an issue Puppet / PUP-1391 puppet device cannot create certs when run as root Change By: Rick Sherman Fix Version/s: PUP 5.4.0 Add Comment This message was sent by Atlassian JIRA (v7.0.2#70111-sha1:88534db) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Tiffany Longworth updated an issue Puppet / PUP-1391 puppet device cannot create certs when run as root Change By: Tiffany Longworth Labels: cs_pr_review redmine Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Eric Delaney updated an issue Puppet / PUP-1391 puppet device cannot create certs when run as root Change By: Eric Delaney QA Risk Assessment: No Action Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Adrien Thebo updated an issue Puppet / PUP-1391 puppet device cannot create certs when run as root Change By: Adrien Thebo Sprint: Platform Core KANBAN Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Reid Vandewiele updated an issue Puppet / PUP-1391 puppet device cannot create certs when run as root Change By: Reid Vandewiele Labels: cs_pr_review redmine Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Thomas Kishel updated an issue Puppet / PUP-1391 puppet device cannot create certs when run as root Change By: Thomas Kishel Comment: I hit this with every other f5 support request, on average. Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Thomas Kishel commented on PUP-1391 Re: puppet device cannot create certs when run as root You only need to specify `--user=root` during `puppet device` runs that save certificate requests or signed certificates, even if `puppet device` is run as root: [root@proxy ~]# puppet device -v Info: starting applying configuration to bigip at https://bigip.example.com/ Info: Creating a new SSL key for bigip Error: Could not request certificate: Could not write /opt/puppetlabs/puppet/cache/devices/bigip/ssl/private_keys/bigip.pem to privatekeydir: Permission denied @ rb_sysopen - /opt/puppetlabs/puppet/cache/devices/bigip/ssl/private_keys/bigip.pem [root@proxy ~]# puppet device -v Info: starting applying configuration to bigip at https://bigip.example.com/ Info: Caching certificate for bigip Error: Could not write /opt/puppetlabs/puppet/cache/devices/bigip/ssl/certs/bigip.pem to certdir: Permission denied @ rb_sysopen -
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Moses Mendoza updated an issue Puppet / PUP-1391 puppet device cannot create certs when run as root Change By: Moses Mendoza Labels: redmine triaged Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title John Duarte updated an issue Puppet / PUP-1391 puppet device cannot create certs when run as root Change By: John Duarte Team: Agent Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title John Duarte updated an issue Puppet / PUP-1391 puppet device cannot create certs when run as root Change By: John Duarte Labels: redmine triaged Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Thomas Kishel commented on PUP-1391 Re: puppet device cannot create certs when run as root I hit this with every other f5 support request, on average. Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Stan Duffy commented on PUP-1391 Re: puppet device cannot create certs when run as root I'm running into this now as I attempt to add the F5 Load balancer to the LEI configuration. Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Owen Rodabaugh updated an issue Puppet / PUP-1391 puppet device cannot create certs when run as root Change By: Owen Rodabaugh Scrum Team: ClientPlatform Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Owen Rodabaugh updated an issue Puppet / PUP-1391 puppet device cannot create certs when run as root Change By: Owen Rodabaugh CS Priority: NeedsPriority Normal Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Chris Barker updated an issue Puppet / PUP-1391 puppet device cannot create certs when run as root Change By: Chris Barker CS Priority: NeedsPriority Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title
Josh Cooper updated an issue
Puppet / PUP-1391
puppet device cannot create certs when run as root
Change By:
Josh Cooper
broken--outputof`puppetdevice--debug`whenranasroot: pre {noformat} info:CreatinganewSSLkeyfor10.0.1.3err:Couldnotrequestcertificate:Couldnotwrite/var/opt/lib/pe-puppet/devices/10.0.1.3/ssl/private_keys/10.0.1.3.pemtoprivatekeydir:Permissiondenied-/var/opt/lib/pe-puppet/devices/10.0.1.3/ssl/private_keys/10.0.1.3.pem /pre {noformat} success--outputof`puppetdevice--debug`whenranasanormaluser: pre {noformat} warning:peercertificatewon'tbeverifiedinthisSSLsessioninfo:Cachingcertificateforcawarning:peercertificatewon'tbeverifiedinthisSSLsessionwarning:peercertificatewon'tbeverifiedinthisSSLsessioninfo:CreatinganewSSLcertificaterequestfor10.0.1.3info:CertificateRequestfingerprint(md5):6C:1C:4C:37:A7:1D:B3:6E:F3:94:25:67:55:27:89:4Cwarning:peercertificatewon'tbeverifiedinthisSSLsessiondebug:Usingcachedcertificateforcawarning:peercertificatewon'tbeverifiedinthisSSLsessioninfo:Cachingcertificatefor10.0.1.3 /pre {noformat} Note,thatyouhavetocopy`/etc/puppetlabs/puppet/device.conf`to`~/.puppet/`
Add Comment
This message was sent by Atlassian JIRA (v6.3.10#6340-sha1:7ea293a)
--
You received this message because you are subscribed to the Google Groups Puppet Bugs group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-bugs.
For more options, visit
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Andreas Jaggi commented on an issue Re: puppet device cannot create certs when run as root Was hit by this bug as well. For me the workaround was to explicitly tell puppet again to work as user root (even though the command itself is already invoked by root): puppet device --verbose --user root Add Comment Puppet / PUP-1391 puppet device cannot create certs when run as root broken -- output of `puppet device --debug` when ran as root: pre info: Creating a new SSL key for 10.0.1.3 err: Could not request certificate: Could not write /var/opt/lib/pe-puppet/devices/10.0.1.3/ssl/private_keys/10.0.1.3.pem to privatekeydir: Permission denied - /var/opt/lib/pe-puppet/devices/10.0.1.3/ssl/private_keys/10.0.1.3.pem /pre suc... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title redmine.exporter created an issue Puppet / PUP-1391 puppet device cannot create certs when run as root Issue Type: Bug Assignee: Unassigned Created: 08/Jan/14 2:37 AM Labels: redmine Priority: Normal Reporter: redmine.exporter broken output of `puppet device --debug` when ran as root: pre info: Creating a new SSL key for 10.0.1.3 err: Could not request certificate: Could not write /var/opt/lib/pe-puppet/devices/10.0.1.3/ssl/private_keys/10.0.1.3.pem to privatekeydir: Permission denied - /var/opt/lib/pe-puppet/devices/10.0.1.3/ssl/private_keys/10.0.1.3.pem /pre success output of `puppet device --debug` when ran as a normal user: pre warning: peer certificate won't be verified in this SSL session info: Caching certificate for ca warning: peer certificate won't be verified in this SSL session warning: peer certificate won't be verified in this SSL session info: Creating a new SSL certificate request for 10.0.1.3 info: Certificate Request fingerprint (md5): 6C:1C:4C:37:A7:1D:B3:6E:F3:94:25:67:55:27:89:4C warning: peer certificate won't be verified in this SSL session debug: Using cached certificate for ca warning: peer certificate won't be verified in this SSL session info: Caching certificate for 10.0.1.3 /pre Note, that you have to copy `/etc/puppetlabs/puppet/device.conf` to `~/.puppet/`
Jira (PUP-1391) puppet device cannot create certs when run as root
Title: Message Title Gavin Williams commented on an issue Re: puppet device cannot create certs when run as root Have migrated this one from Redmine, as have been emailed by someone attempting to use my NetApp Device module who has hit this same error... Can we get a fix in for it? Add Comment Puppet / PUP-1391 puppet device cannot create certs when run as root broken -- output of `puppet device --debug` when ran as root: pre info: Creating a new SSL key for 10.0.1.3 err: Could not request certificate: Could not write /var/opt/lib/pe-puppet/devices/10.0.1.3/ssl/private_keys/10.0.1.3.pem to privatekeydir: Permission denied - /var/opt/lib/pe-puppet/devices/10.0.1.3/ssl/private_keys/10.0.1.3.pem /pre suc... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at
