https://bugzilla.wikimedia.org/show_bug.cgi?id=61413
--- Comment #3 from Tim Landscheidt <[email protected]> --- Let's start with the last bit: No, I didn't even open the configuration field :-). I usually run "sudo puppetd -tv" on the first login just because the initial motd is still the Ubuntu one. But just now I created another instance ("ici"; the web form is really quick to react to Enter keys :-)), logged in, looked for a Puppet agent running ("ps auxfwww | fgrep puppet"), found none, looked in /var/lib/puppet/ssl/certs: | scfc@ici:~$ sudo ls -l /var/lib/puppet/ssl/certs | total 8 | -rw-r--r-- 1 puppet puppet 847 Feb 15 11:37 ca.pem | -rw-r----- 1 puppet puppet 883 Feb 15 11:38 i-00000a66.pmtpa.wmflabs.pem | scfc@ici:~$ and ran Puppet - boom: | scfc@ici:~$ sudo puppetd -tv | info: Creating a new SSL key for i-00000906.pmtpa.wmflabs | info: Caching certificate for i-00000906.pmtpa.wmflabs | err: Could not request certificate: The certificate retrieved from the master does not match the agent's private key. | Certificate fingerprint: 05:91:9E:EE:6C:28:8B:24:FE:19:39:66:03:93:6C:44 | To fix this, remove the certificate from both the master and the agent and then start a puppet run, which will automatically regenerate a certficate. | On the master: | puppet cert clean i-00000906.pmtpa.wmflabs | On the agent: | rm -f /var/lib/puppet/ssl/certs/i-00000906.pmtpa.wmflabs.pem | puppet agent -t | Exiting; failed to retrieve certificate and waitforcert is disabled | scfc@ici:~$ Afterwards: | scfc@ici:~$ sudo ls -l /var/lib/puppet/ssl/certs | total 12 | -rw-r--r-- 1 puppet puppet 847 Feb 15 11:37 ca.pem | -rw-r----- 1 puppet puppet 883 Feb 15 11:46 i-00000906.pmtpa.wmflabs.pem | -rw-r----- 1 puppet puppet 883 Feb 15 11:38 i-00000a66.pmtpa.wmflabs.pem | scfc@ici:~$ So I created another instance ("ici2"), didn't do anything but looked at /etc/puppet/puppet.conf: | certname = i-00000906.pmtpa.wmflabs Should that really be there? -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
