[Puppet Users] MCollective not all nodes answer to commands when using aes_security plugin

2012-06-07 Thread Martin Willemsma
Hi, I deployed MCollective to our Puppet clients. approx. ~ 200. Our platform requires the most secure setup possible, so PSK as securityprovider is not an option. Therefor I changed the security provider to aes_security reusing puppets certificates in the server.cfg as found in the docs (1) Our

[Puppet Users] Re: Nginx + passenger + puppetmaster

2012-06-07 Thread vulzscht
unfortunately this haven't helped me with auth.conf even with your config it returns 403 error i will dig into it a bit more and provide my results here in case of success On Jun 5, 4:35 pm, Rémi ere...@gmail.com wrote: Ok. No problem for me with Nginx. So this is configuration, if you want to

Re: [Puppet Users] how to avoid ssh_authorized_key duplicates ?

2012-06-07 Thread Felix Frank
Hi, On 06/05/2012 05:17 PM, eduardo wrote: First one is about how to avoid duplicate lines in authorized_keys, having something like : define add_ssh_key( $key, $type ) { $username = $title ssh_authorized_key{ ${username}_${key}:

Re: [Puppet Users] Problem with Virtual Resource

2012-06-07 Thread Felix Frank
On 06/07/2012 01:26 AM, Worker Bee wrote: I am testing creating virtual resources and having no luck at all. I am not getting any errors when I execute puppet agent --test but, the user account is never getting created. I would be so grateful if anyone would be kind enough to offer some

Re: [Puppet Users] Duplicate package resource solutions?

2012-06-07 Thread Felix Frank
Hi, On 06/07/2012 06:13 AM, Ryan Bowlby wrote: What would be the downside of creating a module called common-packages which would become the central location for simple packages (no daemon/service, etc)? Declare all the packages within the common-packages class as virtual resources. Then each

Re: [Puppet Users] Problem with Virtual Resource

2012-06-07 Thread Walter Heck
The other option is to move the include virtual to inside the user::developers class. On Thu, Jun 7, 2012 at 9:11 AM, Walter Heck walterh...@gmail.com wrote: We usually choose to inherit the developers class from the virtual class, have you tried that approach? On Thu, Jun 7, 2012 at 7:44 AM,

Re: [Puppet Users] Problem with Virtual Resource

2012-06-07 Thread Felix Frank
On 06/07/2012 10:18 AM, Walter Heck wrote: The other option is to move the include virtual to inside the user::developers class. On Thu, Jun 7, 2012 at 9:11 AM, Walter Heck walterh...@gmail.com wrote: We usually choose to inherit the developers class from the virtual class, have you tried

Re: [Puppet Users] MCollective not all nodes answer to commands when using aes_security plugin

2012-06-07 Thread R.I.Pienaar
- Original Message - From: Martin Willemsma mwillem...@gmail.com To: Puppet Users puppet-users@googlegroups.com Sent: Thursday, June 7, 2012 7:11:41 AM Subject: [Puppet Users] MCollective not all nodes answer to commands when using aes_security plugin Hi, I deployed

[Puppet Users] Conditional based on other module

2012-06-07 Thread Andy Taylor
Hi, I'm currently trying to achieve the following: a program's listen port changes depending on the presence of another service, specifically with Varnish and Apache. So for example, if Varnish is installed on a server, Apache should listen on 8080. If it isn't, then Apache should listen on 80.

Re: [Puppet Users] SSL emailAddress interpreted as part of the CN when using puppet with an external PKI

2012-06-07 Thread Andrew Wasilczuk
Hi Jeff, This is definitely a bug. The regular expression we're using to extract the common name (CN) from the distinguished name (DN) is /^.*?CN\s*=\s*(.*)/ [1] This is a greedy regular expression which explains why it's also grabbing the email address. I think we need to fix this to

Re: [Puppet Users] Thoughts on job listings?

2012-06-07 Thread Craig Dunn
On 30/05/2012 21:49, Michael Stahnke wrote: How do folks feel about getting Puppet job listings on this list? I've rejected a few that we quite spammy, but when the subject matter really is a system admin with puppet experience, the decision becomes a bit different. I'm looking for general

Re: [Puppet Users] Conditional based on other module

2012-06-07 Thread Felix Frank
On 06/07/2012 11:30 AM, Andy Taylor wrote: 1. Have Varnish/non-Varnish systems separated by environment and have a conditional in the module which changes the listen port dependent on the environment of the node; What do you mean by environment? I think this should be a hiera based approach,

[Puppet Users] Re: Conditional based on other module

2012-06-07 Thread Andy Taylor
Thanks for your reply Fenix. By environment I meant Puppet environment, so for example, I'd have production and development. Production contains Varnish, Development is always non-Varnish. I then have a selector in the apache module which, depending on the environment, grabs a Hiera value, so

Re: [Puppet Users] Thoughts on job listings?

2012-06-07 Thread Shawn
+1 for linked in Sent via BlackBerry -Original Message- From: devzero2000 pinto.e...@gmail.com Sender: puppet-users@googlegroups.com Date: Thu, 7 Jun 2012 13:31:18 To: puppet-users@googlegroups.com Reply-To: puppet-users@googlegroups.com Subject: Re: [Puppet Users] Thoughts on job

[Puppet Users] pending tasks in puppet-dashboard

2012-06-07 Thread puppet-us...@wff-gaming.de
Hello Group, I have a problem with pending tasks in puppet-dashboard after I set the MySQL parameter autocommit = 0. Does the dashboard need autocommit to be enabled? Workers are running: env RAILS_ENV=production script/delayed_job status delayed_job: running [pid 4995] delayed_job: running

[Puppet Users] Re: Restart service on ensure running ; class dependecies

2012-06-07 Thread jcbollinger
On Jun 6, 12:33 pm, Andrei-Florian Staicu andrei.sta...@gmail.com wrote: First, for services that have ensure=runnig and for which service bla status returns not running, can puppet be convinced to call service bla restart instead of service bla start? That's a very odd request. If the

[Puppet Users] Dealing with multiple gid changes

2012-06-07 Thread Jistan Idiot
So I discovered yesterday that if puppet changes the gid of a group it doesn't go through the file system and update them with the new correct gid (at least this was the case on RHEL5 and client puppet v2.6.16 and puppetmaster 2.7.12). Now I thought that it might be possible to have puppet

[Puppet Users] Re: Creating configuration for dhcpd

2012-06-07 Thread jcbollinger
On Jun 6, 7:34 am, Jiří Červenka jiricerven...@gmail.com wrote: The problem in this case is this declaration inside your preseed definition:         file { /etc/dhcp/dhcpd.conf-$name: ...                 path    = /etc/dhcp/dhcpd.conf, ...         } #file Note that you are

Re: [Puppet Users] Dealing with multiple gid changes

2012-06-07 Thread Felix Frank
Hi, On 06/07/2012 03:29 PM, Jistan Idiot wrote: Finally, I don't think this is going to work for the next thing I want to tackle. I have a group of websevers that I'm going to start managing with puppet. The uids and gids are not consistent across them. I'm going to want puppet to fix that

Re: [Puppet Users] Re: Restart service on ensure running ; class dependecies

2012-06-07 Thread Andrei-Florian Staicu
On Thu, Jun 7, 2012 at 4:03 PM, jcbollinger john.bollin...@stjude.org wrote: On Jun 6, 12:33 pm, Andrei-Florian Staicu andrei.sta...@gmail.com wrote: First, for services that have ensure=runnig and for which service bla status returns not running, can puppet be convinced to call service bla

[Puppet Users] Re: Conditional based on other module

2012-06-07 Thread jcbollinger
On Jun 7, 4:30 am, Andy Taylor andytaylo...@gmail.com wrote: Hi, I'm currently trying to achieve the following: a program's listen port changes depending on the presence of another service, specifically with Varnish and Apache. So for example, if Varnish is installed on a server, Apache

[Puppet Users] Question regarding variables

2012-06-07 Thread llow...@oreillyauto.com
I am using puppet 2.7.14 I have a class that I use just to define a bunch of variables used by my module, several of them used in more than once place. Currently I have it in module/manifests/classes/module_vars.pp In some of the other classes, I was able to use the variables by qualifying

[Puppet Users] Re: Problem with Virtual Resource

2012-06-07 Thread jcbollinger
On Jun 7, 3:23 am, Felix Frank felix.fr...@alumni.tu-berlin.de wrote: On 06/07/2012 10:18 AM, Walter Heck wrote: The other option is to move the include virtual to inside the user::developers class. On Thu, Jun 7, 2012 at 9:11 AM, Walter Heck walterh...@gmail.com wrote: We usually

[Puppet Users] Re: how to avoid ssh_authorized_key duplicates ?

2012-06-07 Thread eduardo
Thanks you Felix for your answer, yes i'm trying to allow the same key for diferents users and I'm checking your advised, it's welcome. I had been looking for more control on authorized_keys content files. I'm trying another version using Ruby DSL ENC getting advantage of ruby language power.

[Puppet Users] Re: Duplicate package resource solutions?

2012-06-07 Thread jcbollinger
On Jun 6, 11:13 pm, Ryan Bowlby rbowlb...@gmail.com wrote: Hi Guys, I searched through the forum and found a few related threads but no clear puppet sanctioned solution. We have several modules that require the same package, for example rsync or gcc. Yes, this is one of the facets of the

Re: [Puppet Users] Question regarding variables

2012-06-07 Thread Garrett Honeycutt
On 6/7/12 10:14 AM, llow...@oreillyauto.com wrote: I am using puppet 2.7.14 I have a class that I use just to define a bunch of variables used by my module, several of them used in more than once place. Currently I have it in module/manifests/classes/module_vars.pp In some of the other

[Puppet Users] Re: Hiera with Yaml and Json backend does not seem to work for me.

2012-06-07 Thread jcbollinger
On Jun 6, 9:30 pm, Steven Truong midai...@gmail.com wrote: I tried to use both yaml and json backends because some of my users might not know Yaml. They might think they don't, but YAML is a superset of JSON, so any of your users who know JSON also know a big chunk of YAML -- in all

Re: [Puppet Users] Thoughts on job listings?

2012-06-07 Thread Michael Stahnke
I let this sit for a week or so to see what response would be. In general: If you are a puppet user/community member and want to post a job at your company, that is ok. Please add JOB to the subject line. If you are a recruiter or hiring for a 3rd party, it is not ok. You can use traditional

Re: [Puppet Users] Re: Hiera with Yaml and Json backend does not seem to work for me.

2012-06-07 Thread Matthaus Litteken
Steven, It looks like you may be running into http://projects.puppetlabs.com/issues/12122, which has a potential fix awaiting review (https://github.com/puppetlabs/hiera/pull/68). The fix will be going into the current rc series of Hiera. On Thu, Jun 7, 2012 at 8:23 AM, jcbollinger

[Puppet Users] Re: Survey for an Augeas book

2012-06-07 Thread Raphaël Pinson
Hello, Thank you to all of you who took the survey! I had 28 complete answers, which helped me get an idea of what you expect of this book. Now I have to seriously get to work on it. I will try to post updates on tweeter (raphink) as I progress on it. Don't hesitate to contact me if you have

[Puppet Users] types and even class not being found sometimes.

2012-06-07 Thread Steve Traylen
Hi, Today we updated puppet-2.7.14-1 to -2 which should have been boring. I am sure the update is not significant and I did it with out thinking about it. Its probably that this just caused a restart everywhere. I was sure I read a bug about custom defined types not being found

[Puppet Users] Re: Update .k5login with Puppet

2012-06-07 Thread Steve Traylen
On Tuesday, 5 June 2012 06:25:23 UTC+2, Dhaval wrote: On Monday, June 4, 2012 6:13:45 PM UTC+5:30, Paul Tötterman wrote: Hi Dhaval, can you anyone suggest me how can i update .k5login to append new entry or remove existing line Hi Dhaval, This is not what you asked for exactly

Re: [Puppet Users] types and even class not being found sometimes.

2012-06-07 Thread Moses Mendoza
Hi Steven, Just to clarify, the 2.7.14-1 to -2 release was a packaging change, which made puppet depend on facter = 1.5 and 2.0, instead of just = 1.5 as it was before. This change is to prevent puppet installs from pulling in facter 2.0 when it is placed in the puppet labs yum/apt product repos

Re: [Puppet Users] Thoughts on job listings?

2012-06-07 Thread Steve Traylen
On Thursday, 7 June 2012 20:12:51 UTC+2, Michael Stanhke wrote: I let this sit for a week or so to see what response would be. In general: If you are a puppet user/community member and want to post a job at your company, that is ok. Please add JOB to the subject line. If you are a

Re: [Puppet Users] types and even class not being found sometimes.

2012-06-07 Thread Steve Traylen
On Friday, 8 June 2012 01:10:54 UTC+2, Moses Mendoza wrote: Hi Steven, Just to clarify, the 2.7.14-1 to -2 release was a packaging change, which made puppet depend on facter = 1.5 and 2.0, instead of just = 1.5 as it was before. This change is to prevent puppet installs from pulling in

[Puppet Users] Re: Hiera with Yaml and Json backend does not seem to work for me.

2012-06-07 Thread midair77
Thanks Matthaus and jcbollinger for looking into this. I think that this is clearly a bug because my data in json and yaml are not about the same things. In Yaml, I only have ssh_users and in JSON I have dnsservers. When I queried for dnsservers, I got nil. It is good to know that using

[Puppet Users] Re: how to avoid ssh_authorized_key duplicates ?

2012-06-07 Thread eduardo
To be more clear, I'm trying to allow the same key for diferents users but also, tests are tell me that ssh_authorized_key functionality always add keys without any previous check of authorized file contents so If the key was there it's inserted on each loop agent - master, having as result

Re: [Puppet Users] how to avoid ssh_authorized_key duplicates ?

2012-06-07 Thread Jo Rhett
On Jun 7, 2012, at 5:26 PM, eduardo wrote: To be more clear, I'm trying to allow the same key for diferents users but also, tests are tell me that ssh_authorized_key functionality always add keys without any previous check of authorized file contents so If the key was there it's inserted on

Re: [Puppet Users] types and even class not being found sometimes.

2012-06-07 Thread Moses Mendoza
On Jun 7, 2012, at 4:19 PM, Steve Traylen steve.tray...@cern.ch wrote: On Friday, 8 June 2012 01:10:54 UTC+2, Moses Mendoza wrote: Hi Steven, Just to clarify, the 2.7.14-1 to -2 release was a packaging change, which made puppet depend on facter = 1.5 and 2.0, instead of just = 1.5 as it

[Puppet Users] Re: how to avoid ssh_authorized_key duplicates ?

2012-06-07 Thread eduardo
Thanks you Jo for your help, issue solved. there is not duplicate lines keeping same value on comment field. Regards, Eduardo. On 7 jun, 21:13, Jo Rhett jrh...@netconsonance.com wrote: On Jun 7, 2012, at 5:26 PM, eduardo wrote: To be more clear, I'm trying to allow the same key for

[Puppet Users] [JOB] Systems administrator for bioinformatics websites

2012-06-07 Thread Brian Pitts
We're looking for a systems administrator for a bioinformatics website project in Athens, Georgia, USA. Puppet is a *BIG* part of this job, so I thought I'd advertise it here. We've been managing our infrastructure with Puppet since the 0.24 days and are now running 2.7 and PuppetDB. $ find