[Puppet Users] Multiple puppetmasters under one cert

2009-07-06 Thread Matt
I'm about to set-up another puppetmaster to act as a sorry server. a.master.com and b.master.com. If I understand it correctly, I can setup a chained ca with both dns names in it which both servers can issue to clients? Anyone done this before? and if so have they got a quick howto link? I'm

[Puppet Users] Re: Influencing a class from another one?

2009-07-06 Thread David Schmitt
Dick Davies wrote: Think he means this : http://nephilim.ml.org/~rip/puppet/concatfile/ (Volcane on IRC recommended/wrote it; the idea is for e.g. each service that needs a firewall rule can create a fragment of an iptables config, which is then concatenated into a single config file by the

[Puppet Users] Re: Multiple puppetmasters under one cert

2009-07-06 Thread Ohad Levy
yes, see the title Centralized Puppet Infrastructure under http://reductivelabs.com/trac/puppet/wiki/PuppetScalability if you want the manifest that manages all of my multiple puppetmasters- see http://github.com/ohadlevy/puppet-multipuppetmaster/tree/master cheers, Ohad On Mon, Jul 6, 2009 at

[Puppet Users] Re: Influencing a class from another one?

2009-07-06 Thread niczar
On Jul 6, 11:00 am, David Schmitt da...@dasz.at wrote: Dick Davies wrote: Think he means this :http://nephilim.ml.org/~rip/puppet/concatfile/ (Volcane on IRC recommended/wrote it; the idea is for e.g. each service that needs a firewall rule can create a fragment of an iptables config,

[Puppet Users] Re: Workstations and Certs

2009-07-06 Thread Ohad Levy
cgi runs with the user which runs the web server, so for example if you use apache, give sudo rights to apache account to execute puppetca. Ohad On 7/6/09, Allan Marcus al...@lanl.gov wrote: How does the cgi script execute a sudo? --- Thanks, Allan Marcus 505-667-5666 On Jul 3,

[Puppet Users] Re: Workstations and Certs

2009-07-06 Thread Allan Marcus
ok, makes sense. If I did this, would I need the -S in the sudo command? --- Thanks, Allan Marcus 505-667-5666 On Jul 6, 2009, at 8:41 AM, Ohad Levy wrote: cgi runs with the user which runs the web server, so for example if you use apache, give sudo rights to apache account to execute

[Puppet Users] Dangerous Virus

2009-07-06 Thread Swati Tiwari
*HUGE VIRUS COMING ! PLEASE READ FORWARD !* Hi All, I checked with Norton Anti-Virus, and they are gearing up for this virus! I checked Snopes, and it is for real. Get this E-mail message sent around to your contacts ASAP. PLEASE FORWARD THIS WARNING AMONG FRIENDS, FAMILY AND CONTACTS! You

[Puppet Users] Re: Generating a file from a set of fragments on the puppetmaster

2009-07-06 Thread korymatu
My understanding is that there are a series of files that exist on the server. Each contains information that is needed by various nodes. All nodes need some of the files; but not all nodes need all of the files. Based on what I think you are trying to get done, I would probably use generate...

[Puppet Users] problem signing certs ...

2009-07-06 Thread Teratux
Hi, I've been trying to sign a few certificates recently but the system keeps telling me this message: Could not sign request for pc4-lab20.automatica.uci.cu: header too long Any ideas as to why is this happening? I have Debian Lenny 5.0, puppetmaster ( 0.24.5-3 ), puppet ( 0.24.5-3 ) Thanks

[Puppet Users] Re: Puppet Implementation

2009-07-06 Thread Chad Netzer
On Wed, Jul 1, 2009 at 10:47 AM, Tim Galyeantim.galy...@gmail.com wrote: Is there a way to tell puppet to do a sort of comparison on the files, so that if one does not match the default config it is ignored and or not replaced with the default. A portion of my autofs class: class autofs {

[Puppet Users] pluginsync syncing all custom facts in every module

2009-07-06 Thread daniel g
It appears that pluginsync is syncing every custom fact in all modules in our puppetmasterd's modulepath, regardless of whether or not the modules are included for the node in the node list. Is there any way to ensure that only facts from modules that the client is including are synced, or is