Re: [Puppet Users] Puppet Scalability - Centralised Puppet SSL Cert Issues

2010-09-01 Thread Patrick
On Aug 31, 2010, at 10:47 PM, John Warburton wrote: Hi All I am trying to use the section on Centralised Puppet Infrastructure on the Scaling Puppet page - http://projects.puppetlabs.com/projects/1/wiki/Puppet_Scalability No matter what I do, I always end up with the client

Re: [Puppet Users] Puppet Scalability - Centralised Puppet SSL Cert Issues

2010-09-01 Thread Ohad Levy
There is an open bug with 0.25.x (and 2.6) which breaks certificate chaining. this works well for the 0.24.x series, and I hope that will work again sometime in the near future with 2.6.x series. I would recommend you at the moment to use one machine as the CA, if you can accept the fact that its

Re: [Puppet Users] Puppet Scalability - Centralised Puppet SSL Cert Issues

2010-09-01 Thread John Warburton
Thanks Ohad I have updated the Wiki entry with a warning (where's the blink tag?) and references to the bugs on certificate chaining I'm not 100% comfortable with a single CA, so would it be possible to do the following: ca_server = puppet-ca.example.com rsync the ssl dir every 5 minutes to

[Puppet Users] Puppet Scalability - Centralised Puppet SSL Cert Issues

2010-08-31 Thread John Warburton
Hi All I am trying to use the section on Centralised Puppet Infrastructure on the Scaling Puppet page - http://projects.puppetlabs.com/projects/1/wiki/Puppet_Scalability No matter what I do, I always end up with the client contacting a puppet server and rejecting the configuration with a dreaded