[Puppet Users] Re: SSL_connect SYSCALL returned=5

2010-12-14 Thread Kikanny
I'm using webrick but I also have apache installed on the master
because I need it for something else. Could it be because apache is
also using ssl or something like that is causing the problem?

On Dec 14, 8:17 am, Kikanny  wrote:
> I keep getting the following error when I do a catalog run:
>
> err: Could not request certificate: SSL_connect SYSCALL returned=5
> errno=0 state=SSLv2/v3 read server hello A
>
> No idea why its giving me this error. Any help would be appreciated.
> Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] SSL_connect SYSCALL returned=5

2010-12-14 Thread Kikanny
I keep getting the following error when I do a catalog run:

err: Could not request certificate: SSL_connect SYSCALL returned=5
errno=0 state=SSLv2/v3 read server hello A

No idea why its giving me this error. Any help would be appreciated.
Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: Certificate verify failed

2010-12-09 Thread Kikanny
Found out the error. Both the master and client were showing the same
time. But they happened to be on different time zones. AHH!

On Dec 8, 1:19 pm, Kikanny  wrote:
> Hi Nan
>
> Thanks for your response. I tried that. But it says that everything is
> okay. I get "verify return 1" instead of saying why there is a
> verification error
>
> On Dec 8, 10:54 am, Nan Liu  wrote:
>
> > On Wed, Dec 8, 2010 at 6:20 AM, Kikanny  wrote:
> > > So there is something wrong with the date of the certificate. When I
> > > do "openssl x509 -text -in -noout /etc/puppet/ssl/certs/client.pem |
> > > grep -A2 Validity", I get:
>
> > > Validity
> > > Not Before: Dec 7 14:08:10 2010 GMT
> > > Not After : Dec 6 14:08:10 2015 GMT
>
> > > However, the current date of the client is Dec 8 which is well within
> > > the valid range. The date is also the same as master server. But when
> > > I change the date of the client to Dec 9, everything works fine and I
> > > don't get that certificate verify failed error anymore. This is
> > > baffling! Any idea how to fix this? Thanks!
>
> > Let's use openssl to debug this and see if we can get a better error
> > message indicating why the cert is rejected. In the command below
> > replace the certs and ca to the appropriate path on your system:
>
> > openssl s_client -host puppet -port 8140 -cert
> > /var/lib/puppet/ssl/certs/puppet.training.pem -key
> > /var/lib/puppet/ssl/private_keys/puppet.training.pem -CAfile
> > /var/lib/puppet/ssl/certs/ca.pem
>
> > A successful connection:
> > CONNECTED(0003)
> > depth=1 /CN=puppet.training
> > verify return:1
> > depth=0 /CN=puppet.training
> > verify return:1
> > ...
>
> > Here, I intentionally set the system time to 2009 and the error
> > message show why the cert was rejected.
> > CONNECTED(0003)
> > depth=1 /CN=puppet.training
> > verify error:num=9:certificate is not yet valid
> > notBefore=Sep 20 08:01:21 2010 GMT
> > verify return:0
>
> > Hope this helps. Thanks,
>
> > Nan
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: Certificate verify failed

2010-12-08 Thread Kikanny
Hi Nan

Thanks for your response. I tried that. But it says that everything is
okay. I get "verify return 1" instead of saying why there is a
verification error

On Dec 8, 10:54 am, Nan Liu  wrote:
> On Wed, Dec 8, 2010 at 6:20 AM, Kikanny  wrote:
> > So there is something wrong with the date of the certificate. When I
> > do "openssl x509 -text -in -noout /etc/puppet/ssl/certs/client.pem |
> > grep -A2 Validity", I get:
>
> > Validity
> > Not Before: Dec 7 14:08:10 2010 GMT
> > Not After : Dec 6 14:08:10 2015 GMT
>
> > However, the current date of the client is Dec 8 which is well within
> > the valid range. The date is also the same as master server. But when
> > I change the date of the client to Dec 9, everything works fine and I
> > don't get that certificate verify failed error anymore. This is
> > baffling! Any idea how to fix this? Thanks!
>
> Let's use openssl to debug this and see if we can get a better error
> message indicating why the cert is rejected. In the command below
> replace the certs and ca to the appropriate path on your system:
>
> openssl s_client -host puppet -port 8140 -cert
> /var/lib/puppet/ssl/certs/puppet.training.pem -key
> /var/lib/puppet/ssl/private_keys/puppet.training.pem -CAfile
> /var/lib/puppet/ssl/certs/ca.pem
>
> A successful connection:
> CONNECTED(0003)
> depth=1 /CN=puppet.training
> verify return:1
> depth=0 /CN=puppet.training
> verify return:1
> ...
>
> Here, I intentionally set the system time to 2009 and the error
> message show why the cert was rejected.
> CONNECTED(0003)
> depth=1 /CN=puppet.training
> verify error:num=9:certificate is not yet valid
> notBefore=Sep 20 08:01:21 2010 GMT
> verify return:0
>
> Hope this helps. Thanks,
>
> Nan

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: Certificate verify failed

2010-12-08 Thread Kikanny
So there is something wrong with the date of the certificate. When I
do "openssl x509 -text -in -noout /etc/puppet/ssl/certs/client.pem |
grep -A2 Validity", I get:

Validity
Not Before: Dec 7 14:08:10 2010 GMT
Not After : Dec 6 14:08:10 2015 GMT

However, the current date of the client is Dec 8 which is well within
the valid range. The date is also the same as master server. But when
I change the date of the client to Dec 9, everything works fine and I
don't get that certificate verify failed error anymore. This is
baffling! Any idea how to fix this? Thanks!

On Dec 6, 6:00 pm, Stefan Schulte 
wrote:
> On Mon, Dec 06, 2010 at 12:13:37PM -0800, Kikanny wrote:
> > Whenever I try to connect to the master from the client, I get the
> > following error:
>
> > Could not retrieve catalog from remote server: SSL_connect returned=1
> > errno=0 state=SSLv3 read server certificate B: certificate verify
> > failed
>
> I can think of the following reasons:
> * Client generated a new certificate after your master signed one.
> * When you connect a new client it retrieves the masters certificate.
>   When you connect again, the certificate will be checked. If you
>   rebuild your puppetmaster, your client will not trust its new
>   certificate.
> * You revoked your client's certificate
> * You revoked the certificate of your master
>
> If this is your first attempt to use puppet, try a fresh restart:
> * remove /etc/puppet/ssl and/or /var/lib/puppet/ssl on master and client
> * puppet cert --list --all should be empty on master
> * run puppet master --no-daemonize --verbose on master
> * run puppet agent --server masters_hostname --test --waitforcert 15 on
>   client
> * run puppet cert --list and puppet cert --sign on master
>
> If that does not work, you can check the subject of the certificates
> because I think they have to match the hostname. You can do that with
> "puppet cert --list" and "puppet cert --print " and on the client
> "openssl x509 -text -in /var/lib/puppet/ssl/certs/ca.pem" should work
>
> -Stefan
>
>  application_pgp-signature_part
> < 1KViewDownload

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: Certificate verify failed

2010-12-07 Thread Kikanny
I've tried all of the steps you outlined, and still nothing. I also
checked the certificates the subject lines match the hostnames. I'm
out of ideas. This has been frustrating me for the past two days :(

On Dec 6, 6:00 pm, Stefan Schulte 
wrote:
> On Mon, Dec 06, 2010 at 12:13:37PM -0800, Kikanny wrote:
> > Whenever I try to connect to the master from the client, I get the
> > following error:
>
> > Could not retrieve catalog from remote server: SSL_connect returned=1
> > errno=0 state=SSLv3 read server certificate B: certificate verify
> > failed
>
> I can think of the following reasons:
> * Client generated a new certificate after your master signed one.
> * When you connect a new client it retrieves the masters certificate.
>   When you connect again, the certificate will be checked. If you
>   rebuild your puppetmaster, your client will not trust its new
>   certificate.
> * You revoked your client's certificate
> * You revoked the certificate of your master
>
> If this is your first attempt to use puppet, try a fresh restart:
> * remove /etc/puppet/ssl and/or /var/lib/puppet/ssl on master and client
> * puppet cert --list --all should be empty on master
> * run puppet master --no-daemonize --verbose on master
> * run puppet agent --server masters_hostname --test --waitforcert 15 on
>   client
> * run puppet cert --list and puppet cert --sign on master
>
> If that does not work, you can check the subject of the certificates
> because I think they have to match the hostname. You can do that with
> "puppet cert --list" and "puppet cert --print " and on the client
> "openssl x509 -text -in /var/lib/puppet/ssl/certs/ca.pem" should work
>
> -Stefan
>
>  application_pgp-signature_part
> < 1KViewDownload

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Certificate verify failed

2010-12-06 Thread Kikanny
Whenever I try to connect to the master from the client, I get the
following error:

Could not retrieve catalog from remote server: SSL_connect returned=1
errno=0 state=SSLv3 read server certificate B: certificate verify
failed

I tried google and most of the results say the problem is due the
difference in clock between the server and client. However, my server
and client have the same date and time. Here are extra details about
my setup.

Server:
hostname - puppetmaster
domainname - does not have a domain
fqdn - puppetmaster

Client:
hostname - puppetclient
domainname - localdomain
fqdn - puppetclient.localdomain

I have puppetclient and its ip address in the master's /etc/hosts
file. I also have puppetmaster and its ip address in the client's /etc/
hosts file. I use "puppetd --debug --server puppetmaster" on the
client to connect to the server. The first time it connects, it
requests a certificate from the server. I then use puppetca to sign
the certificate on the master. I get the error after doing that step.
I'm completely clueless. I've tried all sorts of permutations and
cannot get it to work. I guess somewhere, my certificates are getting
screwed up or could it also be because my server does not have a
domain name? But that is one of the requirements. Any help would be
appreciated! Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Trying to run puppet from a tarball

2010-12-02 Thread Kikanny
I'm trying to run puppet using the tarball and so far, I've been
unsuccessful. The system I'm trying to run puppet on is running RHEL
5.3. Now first of all, this system does not have access to internet.
Therefore I don't have any access to any of the repositories from
which I can download the rpms and its dependencies. So instead, I got
the puppet, facter, ruby and openssl tarballs. I've installed them all
individually. Now when I try to run puppetd, I get the following
error:

err: Could not create resources for managing Puppet's files and
directories in sections [:main, :agent, :ssl]: Could not autoload
file: no such file to load -- zlib
Could not prepare for execution: Could not autoload rest: no such file
to load - zlib

I get same errors for puppetmasterd too. Any help would be
appreciated. Thank you!

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: Puppet on Windows

2010-10-28 Thread Kikanny
I'm thinking of giving upit looks like puppet for windows still
tries to use the linux directory structure? Because there is a
statement that says:

debug: Puppet::Type::User::ProviderDirectoryService: file /usr/bin/
dsc1 does not exist

I don't know..I'm clueless. If anyone does get it working, please do
share! :)

On Oct 28, 11:21 am, Kikanny  wrote:
> Hmm...that is what puppet reports when it is run. I think its because
> ruby accepts only forward slashes and since puppet is based on
> rubycould make sense. Could be wrong though.
>
> On Oct 28, 10:58 am, li...@truthisfreedom.org.uk wrote:
>
> > Quoting Kikanny :
>
> > > err: Could not request certificate: Could not write C:/puppet/conf/ssl/
> > > private_keys/testing.pem to privatekeydir: Could not find a default
> > > provider for user
> > > Exiting: failed to retrieve certificate and waitforcert is disabled.
>
> > I could be wrong, but shouldn't those slashes be back and not forward  
> > for Windows?
>
> > i.e. the path should be c:\puppet\conf\ssl\private_keys\testing.pem
>
> > M.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: Puppet on Windows

2010-10-28 Thread Kikanny
Hmm...that is what puppet reports when it is run. I think its because
ruby accepts only forward slashes and since puppet is based on
rubycould make sense. Could be wrong though.

On Oct 28, 10:58 am, li...@truthisfreedom.org.uk wrote:
> Quoting Kikanny :
>
> > err: Could not request certificate: Could not write C:/puppet/conf/ssl/
> > private_keys/testing.pem to privatekeydir: Could not find a default
> > provider for user
> > Exiting: failed to retrieve certificate and waitforcert is disabled.
>
> I could be wrong, but shouldn't those slashes be back and not forward  
> for Windows?
>
> i.e. the path should be c:\puppet\conf\ssl\private_keys\testing.pem
>
> M.

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: Puppet on Windows

2010-10-28 Thread Kikanny
Hmmm...I've made some progress. There seemed to be some problems with
Ruby 1.9.1. So I reverted back to Ruby 1.8.7 and followed the steps
again as outlined in 
http://projects.puppetlabs.com/projects/1/wiki/Puppet_Windows.
Installed an additional gem called win32-security. This allowed the
puppet daemon to actually run!!

I do get a bunch of messages saying "No such file or directory -uname -
s". But the daemon actually runs and tries to create a new SSL key.
But it fails with the following error messages.

err: Could not request certificate: Could not write C:/puppet/conf/ssl/
private_keys/testing.pem to privatekeydir: Could not find a default
provider for user
Exiting: failed to retrieve certificate and waitforcert is disabled.

I'm guess its gotta do something with path? Anyone got any ideas?

On Oct 28, 6:41 am, Sandor Szuecs  wrote:
> On Oct 26, 2010, at 8:51 PM, Kikanny wrote:
>
> > Hi. I know that puppet for windows is in its basic stages but I've
> > been screwing around with it. I can get facter working. However one
> > error that it spits out is that: "Could not retrieve puppetversion:
> > Cannot determine basic system flavour."
>
> > When I try to run puppet, I get an error saying "ruby: No such file or
> > directory -- bin/puppetd (LoadError)"
>
> This sounds to me like a ruby GEMPATH issue.
> Try to run puppet using the ruby interpreter directly.
> ruby -I/path/to/dir-with-puppet.rb/ puppet 
>
> If this works you should set the GEMPATH env variable.
>
> > Was wondering if anyone here has succeeded in getting puppet installed
> > on Windows? I've been following this document:
> >http://projects.puppetlabs.com/projects/1/wiki/Puppet_Windows. Thanks!
>
> I don't know but would like to read about this, too.
>
> All the best, Sandor Szücs
> --

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Puppet on Windows

2010-10-26 Thread Kikanny
Hi. I know that puppet for windows is in its basic stages but I've
been screwing around with it. I can get facter working. However one
error that it spits out is that: "Could not retrieve puppetversion:
Cannot determine basic system flavour."

When I try to run puppet, I get an error saying "ruby: No such file or
directory -- bin/puppetd (LoadError)"

Was wondering if anyone here has succeeded in getting puppet installed
on Windows? I've been following this document:
http://projects.puppetlabs.com/projects/1/wiki/Puppet_Windows. Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: Recursion

2010-10-14 Thread Kikanny
Nvm. I fixed it.

On Oct 14, 2:58 pm, Kikanny  wrote:
> I'm pretty sure this is simple, but I just can't get it to work. I
> have a directory called test (in location /home/server/test) and it
> has sub directories and other files. I want to copy this directory and
> all its contents into a location on the client machine. I'm not sure
> what I'm doing wrong. This is what I have right now.
>
> file { "/home/client/test":
>      ensure  => directory,
>      owner   => root,
>      group    => root,
>      mode    => 644,
>      source  => "puppet:///abc/test",
>      recurse => true,
>
> }
>
> In the fileserver.conf, I have the following:
>
> [abc]
>      path /home/server
>      allow *

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Recursion

2010-10-14 Thread Kikanny
I'm pretty sure this is simple, but I just can't get it to work. I
have a directory called test (in location /home/server/test) and it
has sub directories and other files. I want to copy this directory and
all its contents into a location on the client machine. I'm not sure
what I'm doing wrong. This is what I have right now.

file { "/home/client/test":
 ensure  => directory,
 owner   => root,
 group=> root,
 mode=> 644,
 source  => "puppet:///abc/test",
 recurse => true,
}

In the fileserver.conf, I have the following:

[abc]
 path /home/server
 allow *

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: Puppet and Augeas

2010-10-13 Thread Kikanny
Yeah. Was just wondering if there was a better way. Thanks though!

On Oct 13, 11:06 am, Patrick  wrote:
> There isn't an easy way that I know of without writing your own puppet 
> runner.  I only know of this being an issue with Augeas and Mysql though.  
> Why not just install libaugeas-ruby (or whatever it's called) when you 
> install puppet?
>
> On Oct 13, 2010, at 6:58 AM, Kikanny wrote:
>
> > Is it possible for Puppet to make those two runs automatically back to
> > back? For example, the first run does modules A and B. The second run
> > includes module C right after the first run is completed. I hope that
> > made sense!
>
> > On Oct 13, 9:52 am, Felix Frank 
> > wrote:
> >> On 10/13/2010 03:48 PM, Kikanny wrote:
>
> >>> Hi. Is there any way to make puppet run a particular module first
> >>> before another module is run. For example, I'm using the augeas
> >>> resource type in one of the modules. But libaugeas-ruby1.8 is not
> >>> installed in the client machine. So when the catalog is run, I get the
> >>> following error: Could not find a default provider for augeas. So I
> >>> built another module that will install the libaugeas-ruby1.8 package.
> >>> However, I still get the same error. So I thought making this module
> >>> run first would solve the problem. Is this possible? Or is there any
> >>> other smart way to go about this? Thanks!
>
> >> Hi,
>
> >> you won't solve this inside puppet. Puppet cannot enhance itself with
> >> additional providers *during* a run.
> >> So your manifest will require at least two runs, no matter the order of
> >> execution.
>
> >> Cheers,
> >> Felix
>
> > --
> > You received this message because you are subscribed to the Google Groups 
> > "Puppet Users" group.
> > To post to this group, send email to puppet-us...@googlegroups.com.
> > To unsubscribe from this group, send email to 
> > puppet-users+unsubscr...@googlegroups.com.
> > For more options, visit this group 
> > athttp://groups.google.com/group/puppet-users?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: Puppet and Augeas

2010-10-13 Thread Kikanny
Is it possible for Puppet to make those two runs automatically back to
back? For example, the first run does modules A and B. The second run
includes module C right after the first run is completed. I hope that
made sense!

On Oct 13, 9:52 am, Felix Frank 
wrote:
> On 10/13/2010 03:48 PM, Kikanny wrote:
>
> > Hi. Is there any way to make puppet run a particular module first
> > before another module is run. For example, I'm using the augeas
> > resource type in one of the modules. But libaugeas-ruby1.8 is not
> > installed in the client machine. So when the catalog is run, I get the
> > following error: Could not find a default provider for augeas. So I
> > built another module that will install the libaugeas-ruby1.8 package.
> > However, I still get the same error. So I thought making this module
> > run first would solve the problem. Is this possible? Or is there any
> > other smart way to go about this? Thanks!
>
> Hi,
>
> you won't solve this inside puppet. Puppet cannot enhance itself with
> additional providers *during* a run.
> So your manifest will require at least two runs, no matter the order of
> execution.
>
> Cheers,
> Felix

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Puppet and Augeas

2010-10-13 Thread Kikanny
Hi. Is there any way to make puppet run a particular module first
before another module is run. For example, I'm using the augeas
resource type in one of the modules. But libaugeas-ruby1.8 is not
installed in the client machine. So when the catalog is run, I get the
following error: Could not find a default provider for augeas. So I
built another module that will install the libaugeas-ruby1.8 package.
However, I still get the same error. So I thought making this module
run first would solve the problem. Is this possible? Or is there any
other smart way to go about this? Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: Duplicating web servers

2010-10-01 Thread Kikanny
I really appreciate your response Matt. It gave me a good insight on
the different steps I would have to do to get this working! Hopefully
I'll be able to go to the pub one day !!

On Oct 1, 11:34 am, Matt Wallace  wrote:
> On Friday 01 Oct 2010 15:01:25 Kikanny wrote:
>
> > Thank you all for taking your time to explain it to me. I guess I'll
> > give it a whirl and see how it goes. Another question I have is what
> > if the person managing a web server does not have full knowledge of
> > whatever is installed in a server or there was some other
> > configuration management in place. How would I bring that under
> > puppet's control? I'm asking this because we do have servers like
> > that. Thanks!
>
> 1) Get a list of running services/open ports
> 2) Get all the relevant configuration files for those services/ports
> 3) Get a list of all the cronjobs on that system and the commands that are run
> 4) Get a copy of all the scripts that are run by Cron
> 5) Create your puppet manifests using the crontab entries, scripts and config
> files as a reference
> 6) Put all your puppet manifests into git/svn/mercurial/etc.
> 7) Create a staging platform to test your manifests (just because puppet
> parses them correctly doesn't mean that they work!)
> 8) Test your manifests
> 9) Test your manifests
> 10) Test your manifests
> .
> 102) Test Your manifests
> 103) Checkout your manifests to your puppet master (provided they have passed
> the tests!)
> 104) run puppet on a single server and check that your manifests give the
> required results
> 105) Compare the server with one that is already working (but was not built by
> puppet) and try to discover why your puppet manifests aren't working in
> production when they worked in staging
> 106) Fix the issues
> 107) Run puppet again and check that everything now works
> 108) Lock down access to all your servers so the only way a change can be made
> is via GIT/SVN/Mercurial etc
> 109) Force commit messages for any changes to the config files
> 110) Use a web interface to git to track any changes
> 111) Go down the pub and by your entire team a beer for helping you achieve
> the impossible.
>
> If it's of any help, after approx nine months, I'm at various stages of this
> process between 1 and 110 for the different services that we have here... 
> we've
> still not made it down the pub yet... :(
>
> Cheers,
>
> M.

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: Duplicating web servers

2010-10-01 Thread Kikanny
Thank you all for taking your time to explain it to me. I guess I'll
give it a whirl and see how it goes. Another question I have is what
if the person managing a web server does not have full knowledge of
whatever is installed in a server or there was some other
configuration management in place. How would I bring that under
puppet's control? I'm asking this because we do have servers like
that. Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Duplicating web servers

2010-10-01 Thread Kikanny
Hi all. I'm a puppet noob and I've been tinkering with it for the past
couple of weeks. What I would like to do now is duplicate a web
server. So I have a web server running. I would like to make puppet to
duplicate this web server on another machine. This includes installing
the same packages, have the same directory structure, have the same
repository, etc., on the new server. I'm really not sure how to
proceed with this. Any starting tips would be greatly appreciated!

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: Getaddrinfo: Name or service not known

2010-09-24 Thread Kikanny
Got this fixed with Patrick's help. I had to add puppet as an alias in
the /etc/hosts file. For more info:
http://groups.google.com/group/puppet-users/browse_thread/thread/61a66d600c16b6a6/e65f73003e5ec489#e65f73003e5ec489

On Sep 24, 11:08 am, Kikanny  wrote:
> Hi. I'm using puppet 2.6.1 on ubuntu lucid. I'm running puppetd and
> puppetmasterd on the same machine. When I try to run the puppet agent,
> I get the following error:
>
> err: Could not retrieve catalog from remote server: getaddrinfo: Name
> or service not known
> err: Could not retrieve catalog; skipping run
>
> I am completely clueless on what this means. Any help would be
> appreciated! Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: Undefined method 'closed?' for nil:NilClass

2010-09-24 Thread Kikanny
Holy crap! That fixed it! Thank you so much for your help!

On Sep 24, 12:55 pm, Patrick  wrote:
> Try putting puppet as an alias to your server in /etc/hosts (DNS is a better 
> long term solution, but /etc/hosts is usually easier).  The test it again.  
> If that doesn't work, test it with ping to make sure "ping puppet" works.  
>
> On Sep 24, 2010, at 9:45 AM, Kikanny wrote:
>
> > Yup. I get the following when I say ping puppet
> > ping: unknown host puppet
>
> > So I haven't defined puppet as a hostname somewhere or something?
>
> > On Sep 24, 12:38 pm, Patrick  wrote:
> >> On Sep 24, 2010, at 5:34 AM, Kikanny wrote:
>
> >>> Thanks guys! I upgraded puppet from 0.25.4 to 2.6.1. Now when I try to
> >>> run puppetd on the same machine as puppemasterd, I get the following
> >>> error message:
>
> >>> err: Could not retrieve catalog from remote server: getaddrinfo: Name
> >>> or service not known
> >>> err: Could not retrieve catalog; skipping run
>
> >>> I'm not really sure what that means. Is it problem with my hostname or
> >>> dns or something? Any help would be appreciated!
>
> >> Just to clarify, 0.25.4 wasn't working either right?
>
> >> What happens if you run "ping puppet" on that computer?  
>
> > --
> > You received this message because you are subscribed to the Google Groups 
> > "Puppet Users" group.
> > To post to this group, send email to puppet-us...@googlegroups.com.
> > To unsubscribe from this group, send email to 
> > puppet-users+unsubscr...@googlegroups.com.
> > For more options, visit this group 
> > athttp://groups.google.com/group/puppet-users?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: Undefined method 'closed?' for nil:NilClass

2010-09-24 Thread Kikanny
Yup. I get the following when I say ping puppet
ping: unknown host puppet

So I haven't defined puppet as a hostname somewhere or something?

On Sep 24, 12:38 pm, Patrick  wrote:
> On Sep 24, 2010, at 5:34 AM, Kikanny wrote:
>
> > Thanks guys! I upgraded puppet from 0.25.4 to 2.6.1. Now when I try to
> > run puppetd on the same machine as puppemasterd, I get the following
> > error message:
>
> > err: Could not retrieve catalog from remote server: getaddrinfo: Name
> > or service not known
> > err: Could not retrieve catalog; skipping run
>
> > I'm not really sure what that means. Is it problem with my hostname or
> > dns or something? Any help would be appreciated!
>
> Just to clarify, 0.25.4 wasn't working either right?
>
> What happens if you run "ping puppet" on that computer?  

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: Undefined method 'closed?' for nil:NilClass

2010-09-24 Thread Kikanny
Thanks guys! I upgraded puppet from 0.25.4 to 2.6.1. Now when I try to
run puppetd on the same machine as puppemasterd, I get the following
error message:

err: Could not retrieve catalog from remote server: getaddrinfo: Name
or service not known
err: Could not retrieve catalog; skipping run

I'm not really sure what that means. Is it problem with my hostname or
dns or something? Any help would be appreciated!

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Getaddrinfo: Name or service not known

2010-09-24 Thread Kikanny
Hi. I'm using puppet 2.6.1 on ubuntu lucid. I'm running puppetd and
puppetmasterd on the same machine. When I try to run the puppet agent,
I get the following error:

err: Could not retrieve catalog from remote server: getaddrinfo: Name
or service not known
err: Could not retrieve catalog; skipping run

I am completely clueless on what this means. Any help would be
appreciated! Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Undefined method 'closed?' for nil:NilClass

2010-09-21 Thread Kikanny
Hi all

I started researching on puppet and decided I'll try it out on Vmware
Workstation using Ubuntu 10.04. So I'm trying to do the simplest
puppet install pattern as outlined in
http://projects.puppetlabs.com/projects/puppet/wiki/Simplest_Puppet_Install_Pattern.
For now, I'm trying to test puppetd and puppetmasterd on the same
machine. I start puppetmaster and everything works fine. Then I start
puppetd and I end up with following error:

err: /File[/var/lib/puppet/lib]: Failed to generate additional
resources using 'eval_generate': undefined method 'closed?' for
nil:NilClass
err: /File[/var/lib/puppet/lib]: Failed to retrieve current state of
resource: undefined method 'closed?' for nil:NilClass Could not
retrieve file metadata for puppet://puppet/plugins: undefined method
'closed?' for nil:NilClass
err: Could not retrieve catalog from remote server: undefined method
'closed?' for nil:NilClass
err: Could not retrieve catalog; skipping run

I've been trying to figure this out over last couple of days but I'm
completely stumped. Any help would be appreciated. Thanks!

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.