Hello,

There is a Facter bug affecting Puppet 2.7 and Puppet Enterprise 2.5
on Windows[1]. The bug causes Facter to report different values for a
hosts' domain, and therefore fqdn, at different times. This, in turn,
affects certificates and the node name. We have already fixed this in
Facter 2.0, but not Facter 1.6.x, which Puppet 2.7 and PE 2.5 depend
on. We have received a number of requests to have this issue
fixed[2][3], and we would like to see this issue resolved as soon as
possible to stop the bug from proliferating.

However, if we do make this change in Facter 1.6.x, it means the fqdn
fact may change in Puppet 2.7 and PE 2.5. If it does, you will need to
re-issue certificates for these hosts, but it may also involve
updating node entries in manifests, renaming nodes in dashboard, etc.

We believe that most users that have been affected by this problem,
would in fact welcome it being fixed, even though it may require
additional steps if the Windows node name changes. However, there may
be a set of users that have come to rely on the current behavior, and
would not be in favor of this change in a maintenance release.

I have created a simply ruby test script that will display what the
domain fact would change to, if at all[4]. Basically, it tests whether
the primary dns domain is set, and if so, gives preference to that
over the per-interface dns domain. If the script shows that the domain
would change to the "wrong" domain, please let us know.

I would also ask that if you have a primary dns domain set, how was it
configured? Was it set via Active Directory, manually configured in
computer properties, etc?

Thank you, Josh

[1] https://projects.puppetlabs.com/issues/12864
[2] https://projects.puppetlabs.com/issues/12116
[3] 
https://groups.google.com/a/puppetlabs.com/group/pe-users/browse_thread/thread/2d9df7a4c8535cf8/b16b376bb9622eef#b16b376bb9622eef
[4] https://gist.github.com/2726251

-- 
Josh Cooper
Developer, Puppet Labs

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to