Re: [Puppet Users] can we avoid notify/subscribe firing on a mode change?

2012-06-14 Thread Felix Frank
Hi, On 06/13/2012 10:57 AM, Jo Rhett wrote: On Jun 13, 2012, at 1:50 AM, R.I.Pienaar wrote: I can think of a few, but really any case where a files mode out of the box from say RPM prevent some other service from functioning because it relies on this file. File mode change - dependant

Re: [Puppet Users] Define - Class dependencies not respected

2012-06-14 Thread Felix Frank
Hi, On 06/14/2012 01:22 AM, Bruno Léon wrote: Hello, I'm encountering an issue which I think is a bug, but I want to propose it here before filing it for good @puppetlabs, and be sure it's not just a misunderstanding. Actually, I often use a construction where a main class would include

[Puppet Users] What triggers a client to pull from server

2012-06-14 Thread Alex
Hi, Installing my first Puppet master / client environment. All working well so far, the master and client are communicating. However it is not yet clear to me what triggers the client to pull from the master. For instance, I can see evidence of the client having executed the master's

[Puppet Users] Request a way for passing simple info to a package installation

2012-06-14 Thread Brian Gupta
I need to install postfix on a a debian system with puppet. Unfortunately there are a lot of prompts. One way to deal with this is, is: http://projects.puppetlabs.com/projects/1/wiki/Debian_Preseed_Patterns. Another way (apparently) is to give an answerfile in the package resource declaration. (I

Re: [Puppet Users] What triggers a client to pull from server

2012-06-14 Thread R.I.Pienaar
- Original Message - From: Alex alexpuppetgr...@gmail.com To: puppet-users@googlegroups.com Sent: Thursday, June 14, 2012 9:25:13 AM Subject: [Puppet Users] What triggers a client to pull from server Hi, Installing my first Puppet master / client environment. All working well

Re: [Puppet Users] What triggers a client to pull from server

2012-06-14 Thread Alex
On 06/14/2012 10:42 AM, R.I.Pienaar wrote: From: Alexalexpuppetgr...@gmail.com To: puppet-users@googlegroups.com Sent: Thursday, June 14, 2012 9:25:13 AM Subject: [Puppet Users] What triggers a client to pull from server Hi, Installing my first Puppet master / client environment. All

Re: [Puppet Users] Re: puppetdb: UTF-8 byte sequence

2012-06-14 Thread Antidot SAS
Hi, I have no idea how I can help, tell me what to do and I would be glad to help. Regards, Jeremy MAURO On Thu, Jun 14, 2012 at 12:11 AM, Chris Price ch...@puppetlabs.com wrote: Because the serialization format (JSON) and the database both require UTF-8 character encoding for their data,

Re: [Puppet Users] can we avoid notify/subscribe firing on a mode change?

2012-06-14 Thread Jo Rhett
On Jun 14, 2012, at 12:22 AM, Felix Frank wrote: What you're suggesting is a differentiation that has never existed in this context (afaik). I'm not sure I feel good about opening this door - I can easily see it become a gateway for lots of unintended effects to trip users up. How so? The

[Puppet Users] inventory service in Puppet-dashboard

2012-06-14 Thread Sans
Hi there, I installed puppet-dashboard, which works just fine, and trying to activate *inventory-services *but get this error on the agent: err: Could not retrieve catalog from remote server: Error 400 on SERVER: Please install the mysql adapter: `gem install activerecord-mysql-adapter`

Re: [Puppet Users] inventory service in Puppet-dashboard

2012-06-14 Thread Matthew Burgess
On Thu, Jun 14, 2012 at 11:47 AM, Sans r.santanu@gmail.com wrote: [root@sdas puppet-dashboard]# gem list *** LOCAL GEMS *** activemodel (3.2.6) activerecord (3.2.6) activesupport (3.2.6) arel (3.0.2) builder (3.0.0) daemon_controller (0.2.6) fastthread (1.0.7) i18n (0.6.0)

Re: [Puppet Users] Announce: Puppet 2.7.16 Available

2012-06-14 Thread Jo Rhett
On Jun 13, 2012, at 2:52 PM, Matthaus Litteken wrote: RPMs are available at https://yum.puppetlabs.com/el or /fedora https doesn't seem to work. http is working fine. *Significantly improve compilation performance when using modules This appears to be a flat 9 seconds across a wide variety

Re: [Puppet Users] can we avoid notify/subscribe firing on a mode change?

2012-06-14 Thread Felix Frank
On 06/14/2012 12:39 PM, Jo Rhett wrote: What you're suggesting is a differentiation that has never existed in this context (afaik). I'm not sure I feel good about opening this door - I can easily see it become a gateway for lots of unintended effects to trip users up. How so? The variable

Re: [Puppet Users] Re: HTTP 400 errors when using storeconfigs

2012-06-14 Thread Matthew Burgess
So, continuing this saga, I decided yesterday to try and make use of puppetdb as it's supposed to have performance improvements over and above storeconfigs. My first change was to move from a MySQL to PostgreSQL database behind storeconfigs. That still showed the issues I'm seeing. With

Re: [Puppet Users] Announce: Puppet 2.7.16 Available

2012-06-14 Thread James Turnbull
Repos should be back working now. Temporary glitch. Regards James On Jun 14, 2012 12:08 PM, Jo Rhett jrh...@netconsonance.com wrote: On Jun 13, 2012, at 2:52 PM, Matthaus Litteken wrote: RPMs are available at https://yum.puppetlabs.com/el or /fedora https doesn't seem to work. http is

Re: [Puppet Users] inventory service in Puppet-dashboard

2012-06-14 Thread Sans
thanks Matt! I got ruby-mysql-2.8.2-1.el6.x86_64 installed - so. it's not the same thing? Do I have to install that manually to make it work? Cheers!! On Thursday, June 14, 2012 12:01:33 PM UTC+1, Matthew Burgess wrote: You're missing the mysql rubygem. Regards, Matt. -- You

Re: [Puppet Users] Re: HTTP 400 errors when using storeconfigs

2012-06-14 Thread Chris Price
Hi Matt, I think it would be worth opening a ticket for this ( http://projects.puppetlabs.com/projects/puppet/issues/new ). The fact that you are seeing it with both storeconfigs/mysql and puppetdb/postgres leads me to believe that the issue is more likely in puppet core than in either of

Re: [Puppet Users] inventory service in Puppet-dashboard

2012-06-14 Thread Matthew Burgess
On Thu, Jun 14, 2012 at 1:10 PM, Sans r.santanu@gmail.com wrote: thanks Matt! I got ruby-mysql-2.8.2-1.el6.x86_64 installed - so. it's not the same thing? Do I have to install that manually to make it work? Cheers!! Yeah, they're different things, I think. Try doing a 'gem install mysql'

Re: [Puppet Users] Re: puppetdb: UTF-8 byte sequence

2012-06-14 Thread Chris Price
No action necessary; we should be able to create repro scenarios that will help us provide more info in the warning message (and resolve the ticket that I mentioned). If you happen to know (or are able to identify) which resource in your system is triggering the warning (because of a String

Re: [Puppet Users] Re: Best way to relate keys, or stuff multiple values into a single key in hiera?

2012-06-14 Thread jcbollinger
On Wednesday, June 13, 2012 10:21:19 AM UTC-5, Wolf Noble wrote: I wonder about one other thing though, Is create_resources likely to balk if there are values in the hash that are irrelevant for the resource type being fed? I don't know off-hand, but I wouldn't be at all surprised if

Re: [Puppet Users] Re: HTTP 400 errors when using storeconfigs

2012-06-14 Thread Matthew Burgess
On Thu, Jun 14, 2012 at 1:31 PM, Chris Price ch...@puppetlabs.com wrote: Hi Matt, I think it would be worth opening a ticket for this ( http://projects.puppetlabs.com/projects/puppet/issues/new ).  The fact that you are seeing it with both storeconfigs/mysql and puppetdb/postgres leads me to

Re: [Puppet Users] system users class hogging whole cpu

2012-06-14 Thread Azfar Hashmi
Peter, What should I change in nns config to change its behavior without breaking any other function. BTW all are Debian 6 but on different clouds. On Tue, Jun 12, 2012 at 8:40 PM, Azfar Hashmi azfarhas...@gmail.com wrote: Hi, Sorry I forgot to add the code, below is my class. class

Re: [Puppet Users] can we avoid notify/subscribe firing on a mode change?

2012-06-14 Thread Jo Rhett
I am also very disconcerted about the issues involved in setting up new files. You can never, ever, EVER change the mode of a newly installed file without restarting services on all existing machines. That doesn't make any sense. On Jun 14, 2012, at 4:18 AM, Felix Frank wrote: I don't

[Puppet Users] Re: Announce: Puppet 2.7.16 Available

2012-06-14 Thread codec
Hi, On Wednesday, June 13, 2012 11:52:16 PM UTC+2, Matthaus Litteken wrote: (#14297) Handle upstart services better The previous changes to the upstart provider didn't take into account services that may have upstart jobs in /etc/init with no corresponding symlink to

[Puppet Users] Can Puppet detect if a user has changed a *.conf file and not do anything to that *.conf file?

2012-06-14 Thread PorkCharSui
Hello, I work at a university and my colleagues and I are considering Puppet for installing and configuring our linux workstations. Being a university we have a great variety in users, some very adept at maintaining their own system and some not so much. Now we were wondering(and I can't find

Re: [Puppet Users] can we avoid notify/subscribe firing on a mode change?

2012-06-14 Thread Felix Frank
Hi, On 06/14/2012 03:13 PM, Jo Rhett wrote: Now, a few years down the road, we want to start initializing new systems like this: group = myapp, mode = 0664, If we set this parameter, it will modify all existing files and restart the service on all existing hosts. This means,

[Puppet Users] Discover a value for an object

2012-06-14 Thread Andy Botting
I'm doing some funky things to have some shared user accounts realize SSH keys of authorised users. To cut a long story short, everything basically works, except there's a case where I need to discover the home directory path of a user that has been previously created. I had originally had an

[Puppet Users] Re: Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key.

2012-06-14 Thread jcbollinger
On Tuesday, June 12, 2012 1:53:55 PM UTC-5, Scott Merrill wrote: I built a test client, and from the top-level Puppet Master I ran `puppet cert generate test.domain`. I installed the generated files onto the test machine. However, this test client is unable to connect to any of the

Re: [Puppet Users] can we avoid notify/subscribe firing on a mode change?

2012-06-14 Thread Jo Rhett
On Jun 14, 2012, at 6:29 AM, Felix Frank wrote: So the right approach here is to ignore the mode in puppet, and adjust your provisioning process to take care of it. This type of functionality is not only possible, it is documented as intended for this purpose in the replace parameter. You are

Re: [Puppet Users] can we avoid notify/subscribe firing on a mode change?

2012-06-14 Thread Felix Frank
On 06/14/2012 03:44 PM, Jo Rhett wrote: This type of functionality is not only possible, it is documented as intended for this purpose in the replace parameter. You are again Huh, I was not aware of this parameter, to be honest. And I'd admit that you do have a point saying that it's not

Re: [Puppet Users] Re: puppetdb: UTF-8 byte sequence

2012-06-14 Thread Antidot SAS
Hi again, Can I run facter and dump the result? Would that be enough. On every client I have the warning so I would say that the scenario is pretty much reproducible. The only own made factts that I use is a shell scripts with the facts function from:

[Puppet Users] Problem with Load Balancing Puppet masters with Apache mod_proxy

2012-06-14 Thread kai
I have a single LB running Apache with mod_proxy in front of a Puppet master. These are the LB and Puppet master configs: Proxy balancer://puppetmaster BalancerMember http://192.168.1.10:8140 /Proxy Listen 8140 VirtualHost *:8140 SSLEngine on SSLCipherSuite

[Puppet Users] Re: Problem with Load Balancing Puppet masters with Apache mod_proxy

2012-06-14 Thread kai
Puppet version 2.7.14 on Ubuntu. My puppet master config: [main] logdir=/var/log/puppet vardir=/var/lib/puppet ssldir=/var/lib/puppet/ssl rundir=/var/run/puppet factpath=$vardir/lib/facter templatedir=$confdir/templates [master] ssl_client_header = SSL_CLIENT_S_DN ssl_client_verify_header =

Re: [Puppet Users] Request a way for passing simple info to a package installation

2012-06-14 Thread Craig White
On Jun 14, 2012, at 1:24 AM, Brian Gupta wrote: I need to install postfix on a a debian system with puppet. Unfortunately there are a lot of prompts. One way to deal with this is, is: http://projects.puppetlabs.com/projects/1/wiki/Debian_Preseed_Patterns. Another way (apparently) is to

Re: [Puppet Users] can we avoid notify/subscribe firing on a mode change?

2012-06-14 Thread jcbollinger
On Thursday, June 14, 2012 2:22:44 AM UTC-5, Felix.Frank wrote: This idea makes me somewhat unconfortable. I get the feeling that this change would be a lot more fundamental than one might think. I agree. To puppet, each and every resource has one (more or less complex) state, and

[Puppet Users] facter --yaml leaves some fields blank

2012-06-14 Thread Tom Limoncelli
Sometimes facter --yaml doesn't list all the values specified on the command line. I can't find rhyme nor reason why. Here's a demo to show what I mean: # facter --version 1.5.7 # facter --yaml fqdn macaddress lsbdistcodename --- fqdn: my.host.name.example.com lsbdistcodename: squeeze

[Puppet Users] Re: [Puppet-dev] Announce: Facter 1.6.10

2012-06-14 Thread Josh Cooper
On Wed, Jun 13, 2012 at 5:45 PM, Moses Mendoza mo...@puppetlabs.com wrote: Facter 1.6.10 is a maintenance release candidate in the 1.6.x branch with bug fixes. It includes contributions from Hailee Kenney, Josh Cooper, Jeff Weiss, Stefan Shulte, and Moses Mendoza. This release is available

Re: [Puppet Users] Determining the syslog provider

2012-06-14 Thread David Schmitt
On 12.06.2012 14:45, Julien C. wrote: Thanks to both of you for your answers. I am aware of the operatingsystem and release variables, but I can't rely on them because servers don't always use the default syslog provider, as stated in my original post. I can't enforce the same provider on every

Re: [Puppet Users] can we avoid notify/subscribe firing on a mode change?

2012-06-14 Thread David Schmitt
On 14.06.2012 16:09, Felix Frank wrote: I concur that the current feature set is a dangerous trap, but I find the very idea of the replace parameter more questionable than its semantical details. But that's just me. I won't argue this point much further, I'm much more curious about what the

[Puppet Users] Re: puppetdb: UTF-8 byte sequence

2012-06-14 Thread jcbollinger
On Wednesday, June 13, 2012 5:11:49 PM UTC-5, Chris Price wrote: [...] Due to limitations in Puppet's representation of strings (character encoding is not explicitly specified), it's not possible for us to do anything too fancy when we encounter a byte sequence that is not directly

Re: [Puppet Users] Re: Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key.

2012-06-14 Thread Scott Merrill
On Thu, Jun 14, 2012 at 9:44 AM, jcbollinger john.bollin...@stjude.org wrote: On Tuesday, June 12, 2012 1:53:55 PM UTC-5, Scott Merrill wrote: Could not prepare for execution: The certificate retrieved from the master  does not match the agent's private key. Certificate fingerprint:

Re: [Puppet Users] Can Puppet detect if a user has changed a *.conf file and not do anything to that *.conf file?

2012-06-14 Thread Nan Liu
On Thu, Jun 14, 2012 at 6:00 AM, PorkCharSui cnoss...@gmail.com wrote: I work at a university and my colleagues and I are considering Puppet for installing and configuring our linux workstations. Being a university we have a great variety in users, some very adept at maintaining their own

Re: [Puppet Users] facter --yaml leaves some fields blank

2012-06-14 Thread Nan Liu
On Thu, Jun 14, 2012 at 8:27 AM, Tom Limoncelli t...@whatexit.org wrote: Sometimes facter --yaml doesn't list all the values specified on the command line.  I can't find rhyme nor reason why.  Here's a demo to show what I mean: # facter --version 1.5.7 # facter --yaml fqdn macaddress

Re: [Puppet Users] Define - Class dependencies not respected

2012-06-14 Thread Nan Liu
On Wed, Jun 13, 2012 at 4:22 PM, Bruno Léon nonolem...@gmail.com wrote: I'm encountering an issue which I think is a bug, but I want to propose it here before filing it for good @puppetlabs, and be sure it's not just a misunderstanding. Actually, I often use a construction where a main class

Re: [Puppet Users] Adding files to file server on Puppet Master from a client

2012-06-14 Thread Nan Liu
On Tue, Jun 12, 2012 at 7:50 AM, Mark Baxter mark.bax...@visma.com wrote: HI. Firstly, I'm bound to be doing something utterly basically wrong here, so if I am I apologise. Right now I have a fairly simple setup where the JAR files for a Weblogic-based application server are stored in the 

Re: [Puppet Users] Re: Problem with Load Balancing Puppet masters with Apache mod_proxy

2012-06-14 Thread Jeff McCune
Is the same CA is being used to issue the lb certificate and issue the agent certificate? Could you paste the output of `puppet cert print puppetlb.example.com` and again for the agent you're seeing the error on? `puppet cert print agent_certname` -Jeff On Thu, Jun 14, 2012 at 7:50 AM, kai

Re: [Puppet Users] Re: Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key.

2012-06-14 Thread Nan Liu
On Thu, Jun 14, 2012 at 9:27 AM, Scott Merrill ski...@skippy.net wrote: On Thu, Jun 14, 2012 at 9:44 AM, jcbollinger john.bollin...@stjude.org wrote: On Tuesday, June 12, 2012 1:53:55 PM UTC-5, Scott Merrill wrote: Could not prepare for execution: The certificate retrieved from the master  

Re: [Puppet Users] Re: puppetdb: UTF-8 byte sequence

2012-06-14 Thread Deepak Giridharagopal
On Thu, Jun 14, 2012 at 9:22 AM, jcbollinger john.bollin...@stjude.orgwrote: On Wednesday, June 13, 2012 5:11:49 PM UTC-5, Chris Price wrote: [...] Due to limitations in Puppet's representation of strings (character encoding is not explicitly specified), it's not possible for us to do

Re: [Puppet Users] Re: Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key.

2012-06-14 Thread Scott Merrill
On Thu, Jun 14, 2012 at 12:50 PM, Nan Liu n...@puppetlabs.com wrote: On Thu, Jun 14, 2012 at 9:27 AM, Scott Merrill ski...@skippy.net wrote: If I point that node to my top-level Master (via entry in /etc/hosts), the `puppet agent --test --noop` invocation works without error. You want to make

[Puppet Users] Forbidden request: puppetagent1.example.com(192.168.1.101) access to /certificate_revocation_list/ca [find] at line 99

2012-06-14 Thread kai
Puppet version: 2.7.14 Puppet master behind apache with mod_proxy load balancer. I am able to authenticate with the cert as per these headers: Accept: s X-SSL-Subject: /CN=puppetagent1.example.com X-Client-DN: /CN=puppetagent1.example.com X-Client-Verify: SUCCESS Any idea what this error means

Re: [Puppet Users] Re: Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key.

2012-06-14 Thread Nan Liu
On Thu, Jun 14, 2012 at 10:12 AM, Scott Merrill ski...@skippy.net wrote: On Thu, Jun 14, 2012 at 12:50 PM, Nan Liu n...@puppetlabs.com wrote: On Thu, Jun 14, 2012 at 9:27 AM, Scott Merrill ski...@skippy.net wrote: If I point that node to my top-level Master (via entry in /etc/hosts), the

Re: [Puppet Users] Re: Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key.

2012-06-14 Thread Scott Merrill
On Thu, Jun 14, 2012 at 1:34 PM, Nan Liu n...@puppetlabs.com wrote: On Thu, Jun 14, 2012 at 10:12 AM, Scott Merrill ski...@skippy.net wrote: On Thu, Jun 14, 2012 at 12:50 PM, Nan Liu n...@puppetlabs.com wrote: On Thu, Jun 14, 2012 at 9:27 AM, Scott Merrill ski...@skippy.net wrote: If I point

Re: [Puppet Users] Re: Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key.

2012-06-14 Thread Gary Larizza
On Thu, Jun 14, 2012 at 12:55 PM, Scott Merrill ski...@skippy.net wrote: On Thu, Jun 14, 2012 at 1:34 PM, Nan Liu n...@puppetlabs.com wrote: On Thu, Jun 14, 2012 at 10:12 AM, Scott Merrill ski...@skippy.net wrote: On Thu, Jun 14, 2012 at 12:50 PM, Nan Liu n...@puppetlabs.com wrote: On Thu, Jun

[Puppet Users] Re: Can Puppet detect if a user has changed a *.conf file and not do anything to that *.conf file?

2012-06-14 Thread Nick Fagerlund
On Thursday, June 14, 2012 6:00:21 AM UTC-7, PorkCharSui wrote: ... can Puppet detect if a user has changed a *.conf file him(her)self and NOT do anything to that *.conf file? Nope! Puppet has no good way to tell the difference between: - A user using sudo to deliberately change a

Re: [Puppet Users] Re: Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key.

2012-06-14 Thread Scott Merrill
On Thu, Jun 14, 2012 at 1:58 PM, Gary Larizza g...@puppetlabs.com wrote: Please DO NOT take this as RTFM, but have you checked out the docs that we recommend for the process here -- http://docs.puppetlabs.com/guides/scaling_multiple_masters.html  If you're using them and there are things going

Re: [Puppet Users] Forbidden request: puppetagent1.example.com(192.168.1.101) access to /certificate_revocation_list/ca [find] at line 99

2012-06-14 Thread Jeff McCune
On Thu, Jun 14, 2012 at 10:19 AM, kai kaiva...@gmail.com wrote: Puppet version: 2.7.14 Puppet master behind apache with mod_proxy load balancer. I am able to authenticate with the cert as per these headers: Accept: s X-SSL-Subject: /CN=puppetagent1.example.com X-Client-DN:

Re: [Puppet Users] Re: Problem with Load Balancing Puppet masters with Apache mod_proxy

2012-06-14 Thread david.gar...@gmail.com
Yeah, Good question: Sorry for the interjection. I would like to create a none puppet generated CA and intermediate CA for my puppet master. I tried but failed. Does anyone have a procedure or has anyone done this? Thanks, Dave Garvey On Thu, Jun 14, 2012 at 9:45 AM, Jeff McCune

Re: [Puppet Users] Re: Problem with Load Balancing Puppet masters with Apache mod_proxy

2012-06-14 Thread david.gar...@gmail.com
If puppet is to be enterprise than I would think we should be able to use a CA generated for the organization? On Thu, Jun 14, 2012 at 12:03 PM, david.gar...@gmail.com david.gar...@gmail.com wrote: Yeah, Good question: Sorry for the interjection. I would like to create a none puppet

Re: [Puppet Users] Re: Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key.

2012-06-14 Thread Nan Liu
On Thu, Jun 14, 2012 at 10:55 AM, Scott Merrill ski...@skippy.net wrote: On Thu, Jun 14, 2012 at 1:34 PM, Nan Liu n...@puppetlabs.com wrote: On Thu, Jun 14, 2012 at 10:12 AM, Scott Merrill ski...@skippy.net wrote: On Thu, Jun 14, 2012 at 12:50 PM, Nan Liu n...@puppetlabs.com wrote: On Thu, Jun

[Puppet Users] run stages and users

2012-06-14 Thread Jo Rhett
How do you deal with dependency cycles around things like the root user? I'm ending up defining files with uid=0,gid=0 rather than root, root just to avoid dependancy cycles. -- Jo Rhett Net Consonance : net philanthropy to improve open source and internet projects. -- You received this

Re: [Puppet Users] run stages and users

2012-06-14 Thread Stephen Gran
Hi, What does the root user depend on that you're getting in to dependency cycles over? Cheers, On Thu, 2012-06-14 at 12:24 -0700, Jo Rhett wrote: How do you deal with dependency cycles around things like the root user? I'm ending up defining files with uid=0,gid=0 rather than root, root

Re: [Puppet Users] can we avoid notify/subscribe firing on a mode change?

2012-06-14 Thread Jo Rhett
On Jun 14, 2012, at 8:51 AM, David Schmitt wrote: When something changes the service has to be notified. When the service should not be restarted, puppet should not be running or the Service%restart parameter should be set to /bin/true. That's far too black/white for any real world scenario.

Re: [Puppet Users] Re: Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key.

2012-06-14 Thread Scott Merrill
On Thu, Jun 14, 2012 at 3:13 PM, Nan Liu n...@puppetlabs.com wrote: So normally for self signed CA the issuer and subject is the same. In this case you are issuing the certs via: CN=Puppet CA: top-level-master.domain However you are asking the system to verify against a CA cert that presents

Re: [Puppet Users] run stages and users

2012-06-14 Thread Jo Rhett
It doesn't, but many things in stage Main depend on the root user. It appears that a user can only exist and be depended on in a single stage, and that hardly makes sense for users like root... On Jun 14, 2012, at 12:28 PM, Stephen Gran wrote: What does the root user depend on that you're

Re: [Puppet Users] run stages and users

2012-06-14 Thread Christopher Wood
I organize the root user in the first stage (before apt-get update!) and then everything else in a subsequent stage. Later I found out that puppet will write files as root:root, 0644 in the default configuration. That meant I could remove many owner, group, mode attributes from my file

Re: [Puppet Users] run stages and users

2012-06-14 Thread Christopher Wood
My quick take is that declaring this: user { 'root': } Means that suddenly every file resource which says this... owner = root ...now implicitly depends on that user resource. So unless you use require = User['root'] in your owner=root file resources, things will break as some resources will

[Puppet Users] File attributes inside template

2012-06-14 Thread Trunet
Hi, I would like to know if I can use a File attribute inside a template. Is it possible? Example: A class with: file { /ssl/certificate.crt: source = puppet:///modules/apache/certificate.crt, owner = root, group = apache, mode = 440, require =

Re: [Puppet Users] run stages and users

2012-06-14 Thread Jo Rhett
On Jun 14, 2012, at 12:33 PM, Christopher Wood wrote: I organize the root user in the first stage (before apt-get update!) and then everything else in a subsequent stage. Yep, this turns out to be the answer. More cyclic problems here but I've worked through those. -- Jo Rhett Net

Re: [Puppet Users] inventory service in Puppet-dashboard

2012-06-14 Thread Sans
I finally managed to do *gem install mysql* and it's now installed. Although I don't any error(s) on the agent, but, I get: Could not retrieve facts from inventory service: 403 Forbidden error on the browser. I already have this in my auth.conf: path /facts method find auth any allow *

[Puppet Users] Re: Setting up puppetmaster

2012-06-14 Thread tas
I am instead open a new one. I realize I am making a big mess... Thanks thus far. On Wednesday, June 13, 2012 9:24:16 PM UTC-4, tas wrote: Hi Nick and James, You want me to do that on Master? I just did. I can't do that on the client. Master: $ puppet master --configprint certname

Re: [Puppet Users] inventory service in Puppet-dashboard

2012-06-14 Thread Sans
Forgot to mention that I'm also seeing these in the syslog: puppet-master[7035]: Denying access: Forbidden request: dashboard(xx.xxx.xx.xx) access to /facts/.cloud.com [find] authenticated at line 99 puppet-master[7035]: Forbidden request: dashboard(xx.xxx.xx.xx) access to

[Puppet Users] nodes cannot retrieve catalog after installing puppet-dashbaord

2012-06-14 Thread Michael Altfield
Hi, I just installed configured puppet-dashboard as per the official documentation http://docs.puppetlabs.com/dashboard/manual/1.2/, but now my nodes cannot retrieve their catalog: [root@puppetnode-01 ~]# puppetd --debug --verbose --no-daemonize ... err: Could not retrieve catalog from

Re: [Puppet Users] Re: Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key.

2012-06-14 Thread Nan Liu
On Thu, Jun 14, 2012 at 12:30 PM, Scott Merrill ski...@skippy.net wrote: On Thu, Jun 14, 2012 at 3:13 PM, Nan Liu n...@puppetlabs.com wrote: So normally for self signed CA the issuer and subject is the same. In this case you are issuing the certs via: CN=Puppet CA: top-level-master.domain

[Puppet Users] Starting over with Puppet Master and Puppet Client

2012-06-14 Thread tas
I am making a huge mess, so I'd rather to start over and configure them. This is a total newbie trying to setup something for his lab I think this would also help many people out there.. * Part I. * I reinstalled puppetmaster and puppet on the master and client machine. Here is the

[Puppet Users] Re: File attributes inside template

2012-06-14 Thread Nick Fagerlund
On Thursday, June 14, 2012 12:43:48 PM UTC-7, Trunet wrote: Hi, I would like to know if I can use a File attribute inside a template. Is it possible? No, you can't query resource attributes like that. Instead, you should extract the string into a variable, then use the same variable

Re: [Puppet Users] Starting over with Puppet Master and Puppet Client

2012-06-14 Thread Dan White
Silly Question Number One: What node definitions do you have in your manifest ? Classically, you have *.pp files in /etc/puppet/manifest/nodes that are referenced from /etc/puppet/manifest/site.pp As an example, this line is in my site.pp file: import nodes/*-nodes.pp “Sometimes I think the

Re: [Puppet Users] Starting over with Puppet Master and Puppet Client

2012-06-14 Thread tas
Dear Ygor, I am afraid I don't have any node definition. I search through... none. We basically first blueprint our blueprint machine, generate puppet files, and then move them to the puppetmaster's /etc/puppet/modules Then there is an init.pp file. root@ghive-ldap:/etc/puppet# ls -r ssl

Re: [Puppet Users] Starting over with Puppet Master and Puppet Client

2012-06-14 Thread Dan White
Without a default node definition as an absolute minimum, what is the Puppet Master supposed to do when queried by the Puppet Client/Agent ? I believe it will do exactly what your servers are doing: bupkis ! http://en.wiktionary.org/wiki/bupkis “Sometimes I think the surest sign that

Re: [Puppet Users] can we avoid notify/subscribe firing on a mode change?

2012-06-14 Thread Brian Gallew
I certainly don't see any value there. You need to come up with a non-strawman argument. Configuration management is about consistency. Every system is like every other system to the extent that is possible. Where it is not possible, you describe that difference in the manifests such that it

Re: [Puppet Users] Re: Can Puppet detect if a user has changed a *.conf file and not do anything to that *.conf file?

2012-06-14 Thread Brian Gallew
I had exactly this situation: I wanted to manage application configuration, but developers wanted to be able to alter the configs as necessary, yet still revert to the real config when they wanted. It's a snap with a define{}: pre # We would like to both distribute configuration files as well as

Re: [Puppet Users] Trying to get tagmail to work

2012-06-14 Thread Iain Sutton
Legacy perhaps, but we have: confdir = /etc/puppet tagmap = $confdir/tagmail.conf in puppet.conf's [master] section and our tagmails work. Cheers, Iain On 13 June 2012 05:59, Jason Knudsen jason.knud...@gmail.com wrote: Yeah -- checked that already, sorry forgot to mention that. Setup

[Puppet Users] Announce: PuppetDB 0.9.1 Available

2012-06-14 Thread Matthaus Litteken
PuppetDB 0.9.1 is the second beta release on the road to 1.0. Changes include bug fixes and performance improvements. For details on changes in this release, please see the release notes below. # Downloads Available in native package format at http://yum.puppetlabs.com

[Puppet Users] Puppetmaster and two IP addresses?

2012-06-14 Thread Jakov Sosic
I have a problem with puppet on a machine which has public and private IP address. My nodes are on private lan, and hostname of master is FQDN of the public IP. Client's just cannot connect. Problem which I get is: err: Could not retrieve catalog from remote server: SSL_connect returned=1

Re: [Puppet Users] Starting over with Puppet Master and Puppet Client

2012-06-14 Thread tas
Dear Ygor, Thank you for the guidance. I didn't know we have to specify one... almost every single tutorial I visit didn't mention it :( bad... http://pratikamin.wordpress.com/2011/05/24/turning-a-blueprint-puppet-recipe-into-a-puppet-deployment/ Based on that tutorial, since I blueprint my

Re: [Puppet Users] Re: Problem with Load Balancing Puppet masters with Apache mod_proxy

2012-06-14 Thread david.gar...@gmail.com
You would have to sync serial number too? On Thu, Jun 14, 2012 at 12:10 PM, david.gar...@gmail.com david.gar...@gmail.com wrote: If puppet is to be enterprise than I would think we should be able to use a CA generated for the organization? On Thu, Jun 14, 2012 at 12:03 PM,

Re: [Puppet Users] Re: Problem with Load Balancing Puppet masters with Apache mod_proxy

2012-06-14 Thread david.gar...@gmail.com
Well everything would have to be synced... On Thu, Jun 14, 2012 at 5:03 PM, david.gar...@gmail.com david.gar...@gmail.com wrote: You would have to sync serial number too? On Thu, Jun 14, 2012 at 12:10 PM, david.gar...@gmail.com david.gar...@gmail.com wrote: If puppet is to be enterprise

Re: [Puppet Users] Puppetmaster and two IP addresses?

2012-06-14 Thread Jeff McCune
On Thu, Jun 14, 2012 at 4:29 PM, Jakov Sosic jso...@srce.hr wrote: I have a problem with puppet on a machine which has public and private IP address. My nodes are on private lan, and hostname of master is FQDN of the public IP. Client's just cannot connect. Problem which I get is: err:

Re: [Puppet Users] Re: Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key.

2012-06-14 Thread Scott Merrill
On Thu, Jun 14, 2012 at 5:13 PM, Nan Liu n...@puppetlabs.com wrote: A few other thing you can try is to run the web brick server and run puppet master --debug --no-daemonize on the sub master and see if that give any more info. You can also try enabling CA on the sub-master and check what you

[Puppet Users] Re: Announce: puppetlabs_spec_helper 0.1.0 Available

2012-06-14 Thread Paul Belanger
On Friday, June 8, 2012 4:32:35 PM UTC-4, Branan Purvine-Riley wrote: puppetlabs_spec_helper is a Rubygem to make writing and running module spec tests using rspec-puppet easier. It includes a set of common rake tasks and a spec_helper that correctly initializes puppet and rspec-puppet for

Re: [Puppet Users] Re: Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key.

2012-06-14 Thread Gary Larizza
On Thu, Jun 14, 2012 at 9:12 PM, Scott Merrill ski...@skippy.net wrote: On Thu, Jun 14, 2012 at 5:13 PM, Nan Liu n...@puppetlabs.com wrote: A few other thing you can try is to run the web brick server and run puppet master --debug --no-daemonize on the sub master and see if that give any more