Re: [Puppet Users] PE 2019.2 with Puppet Agent 5.x (CA issue?)

2019-11-16 Thread Justin Stoller
Depending on your security inclinations you might try turning crl checking off on your 5.5 agent (iirc, that was the biggest issue - if not the only issue). You might have to also copy the signed cert over to the agent too). Otherwise, you may be able to turn off your master, delete your ssldir

Re: [Puppet Users] Managing a local users password with puppet on EL7

2019-11-16 Thread A Manzer
It's probably ok to reuse the same salt; it's just to defeat pre-computation attacks. But if you really don't want to, you could: - Use the username as the salt. That'll be static, so idempotent, and different for every user. Not as great as random salt, but better than no salt.

Re: [Puppet Users] PE 2019.2 with Puppet Agent 5.x (CA issue?)

2019-11-16 Thread A Manzer
Using the LTS is one option. I disagree that it says that pre-6 agents won't play with a 6 server. On that page I linked, there's a compatibility matrix that shows 5.x agents are compatible with PE 2019.1. Also, the first phrase of the quote says that I can use pre-6.x agents. I think I'm

Re: [Puppet Users] PE 2019.2 with Puppet Agent 5.x (CA issue?)

2019-11-16 Thread 'Dan White' via Puppet Users
Use 2018.1.11 (LTS) It clearly says that pre-6 agents won’t play with a 6 server. —- "Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us." Bill Waterson (Calvin & Hobbes) > On Nov

[Puppet Users] PE 2019.2 with Puppet Agent 5.x (CA issue?)

2019-11-16 Thread A Manzer
I've been using Puppet Enterprise at work quite successfully for a long time. So I finally decided to take advantage of the "Run 10 nodes for free" offer and run PE at home. I've set up my PE server using the latest 2019.2.1. My desktop computer runs Ubuntu 18.04, and I was able to `curl |