On 29.2.2012 21:55, Tom wrote:
> Ok, I'm new to puppet, but I've got everything working for my setup.
> Almost.
> 
> I'm trying to set up a new server, using cobbler, and then puppet.
> 
> CentOS 6.2
> Puppet 2.7.11
> Cobbler 2.0.11
> 
> I have things set up so I can use kickstart to install the server on
> boot.  It installs puppet and facter from the puppetlabs repos and the
> snippet $SNIPPET('puppet_install_if_enabled') and
> $SNIPPET('puppet_register_if_enabled') is called in the %post section.
...
> puppetd --server puppet.domain.com --test --waitforcert 15
> err: Could not request certificate: The certificate retrieved from the
> master does not match the agent's private key.
> Certificate fingerprint: E5:B1:52:B2:DC:DE:8C:DE:A7:AF:ED:
> 19:C8:E3:F5:12

I think it means that the new installed client created a key and csr in
%post as expected but the master already had a certificate for that
machine. Before you reinstall you have to clean the existing cert on the
master.

-- 
Kind Regards, Markus Falb

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to