[Puppet Users] Re: Puppet+Augeas sudoers problem

2015-05-12 Thread bjoern pohl
Answering myself: while testing around something seems to have installed the FixedSudoers lens which handles the same file (sudoers ). So it worked after specifying the lens + incl , but removing that FixedSudoers lens did the same. needed to read that Lenses @FixedSudoers and @Sudoers could

[Puppet Users] Puppet+Augeas sudoers problem

2015-05-12 Thread bjoern pohl
Hi, i'm currently having trouble with augeas. A snipplet which worked fine on my homebox ( ubuntu, some 3.+ puppet, some weeks old... ) does not work on a RHEL6 /Puppet 3.7.4/augeas 1.0 installation: basically, i want to modify the sudoers file with augeas. using augtool this works fine, so

[Puppet Users] second run of puppetd creates a new SSL key

2015-05-12 Thread Ed Deloye
We recently upgraded puppet to 2.7.26 with the puppetmaster running CentOS 6.6. Building a new RHEL5 system using kickstart, after the first reboot puppetd runs and creates a new SSL key which is autosigned by the puppetmaster. At the completion of the puppetd run the system reboots. When

Re: [Puppet Users] second run of puppetd creates a new SSL key

2015-05-12 Thread Ed Deloye
On Tuesday, May 12, 2015 at 2:48:21 PM UTC-4, Ramin K wrote: On 5/12/15 10:48 AM, Ed Deloye wrote: We recently upgraded puppet to 2.7.26 with the puppetmaster running CentOS 6.6. Building a new RHEL5 system using kickstart, after the first reboot puppetd runs and creates a new

[Puppet Users] Re: Local Module installation via r10k - puppet ....Help Needed

2015-05-12 Thread Vijayabalan Balakrishnan
-bash-4.1$ r10k deploy environment -pv INFO - Deploying environment /etc/puppetlabs/puppet/environments/operation_production INFO - Deploying environment /etc/puppetlabs/puppet/environments/operation_vijay [root@ puppet]# ls -ltrh

[Puppet Users] Build scripts for puppet-agent?

2015-05-12 Thread Nick Howes
Hi there Does anyone have an idea of when the build scripts used to make the puppet-agent AIO package will be available? I'd like to tweak it to build a Solaris IPS package and it was mentioned elsewhere that they'd appear eventually. Cheers -- You received this message because you are

Re: [Puppet Users] second run of puppetd creates a new SSL key

2015-05-12 Thread Ramin K
On 5/12/15 10:48 AM, Ed Deloye wrote: We recently upgraded puppet to 2.7.26 with the puppetmaster running CentOS 6.6. Building a new RHEL5 system using kickstart, after the first reboot puppetd runs and creates a new SSL key which is autosigned by the puppetmaster. At the completion of the

Re: [Puppet Users] Re: check if user exist

2015-05-12 Thread Alfredo De Luca
Thanks so much Eric. Really appreciated. /Alfredo On 12/05/2015 10:28 AM, Eric Sorenson eric.soren...@puppetlabs.com wrote: The canonical way to do this is like this: http://serverfault.com/questions/350230/how-can-i-have-puppet-only-set-password-when-creating-a-user There's an open

[Puppet Users] puppetdb 2.2.0 on SLES 11.3: start failure Error: Could not find or load main class com.puppetlabs.puppetdb.core

2015-05-12 Thread Helmut Rickel
Hello, we run puppet 3.6.2 on SLES 11 SP3 and downloaded puppetdb 2.2.0 from http://download.opensuse.org/repositories/systemsmanagement:/puppet:/devel/SLE_11_SP3/x86_64/puppetdb-2.2.0-14.34.x86_64.rpm . Trying to start puppetdb produces nothing more than this message Error: Could not find

Re: [Puppet Users] puppetdb 2.2.0 on SLES 11.3: start failure Error: Could not find or load main class com.puppetlabs.puppetdb.core

2015-05-12 Thread Ken Barber
we run puppet 3.6.2 on SLES 11 SP3 and downloaded puppetdb 2.2.0 from http://download.opensuse.org/repositories/systemsmanagement:/puppet:/devel/SLE_11_SP3/x86_64/puppetdb-2.2.0-14.34.x86_64.rpm . Trying to start puppetdb produces nothing more than this message Error: Could not find or load

Re: [Puppet Users] puppetdb 2.2.0 on SLES 11.3: start failure Error: Could not find or load main class com.puppetlabs.puppetdb.core

2015-05-12 Thread Helmut Rickel
Hello Ken, this solved the problem. I can not compile puppetdb so we will use 2.2.0 until a newer version is supplied by the opensuse community. Thanks a lot for your help! Kind regards Helmut -- You received this message because you are subscribed to the Google Groups Puppet Users group.

[Puppet Users] nudge in the right direction needed: BFA and puppetlabs-firewall

2015-05-12 Thread Peter Berghold
Hey folks, I'm trying to figure out how to code rules in puppetlabs-firewall to mitigate Brew Force Attacks (BFA) and can't figure out how to code it. Here is the pattern I'm trying to code: $ sudo iptables -A INPUT -i eth0 -p tcp --dport 22 -m state --state NEW -m recent --set --name SSH $

Re: [Puppet Users] nudge in the right direction needed: BFA and puppetlabs-firewall

2015-05-12 Thread Christopher Wood
Possibly you mean brute-force attacks? I find fail2ban useful for this sort of thing, since this is not exclusively a firewall issue: http://en.wikipedia.org/wiki/Fail2ban That said I haven't ever crossed this with a puppet-managed firewall. On Tue, May 12, 2015 at 02:17:59PM +, Peter

[Puppet Users] Local Module installation via r10k - puppet ....Help Needed

2015-05-12 Thread Vijayabalan Balakrishnan
I have configured the puppet PE 3.8 and sucessfully integrated r10k and git.I am able to download modules from forgeapi.puppetlabs.com and i can able to populate via r10k for dynamic branches. Now i have downloaded some modules from forgeapi.puppetlabs.com and kept it to /modules directory my

Re: [Puppet Users] nudge in the right direction needed: BFA and puppetlabs-firewall

2015-05-12 Thread Peter Berghold
yeah... using fail2ban right now and I'm not 100% pleased with it. I had to employ a hack to get Puppet and fail2ban to get along and I'm not always convinced it does what it should. On Tue, May 12, 2015 at 10:30 AM Christopher Wood christopher_w...@pobox.com wrote: Possibly you mean