Re: [Puppet Users] "Registering" a node with a central service?

2011-02-01 Thread KC Braunschweig
On Thu, Jan 27, 2011 at 7:54 AM, Rob McBroom wrote: > On Jan 26, 2011, at 9:15 AM, Howard Jones wrote: > >> I have a couple of applications (backup, Cacti, Asset Tracking) where I want >> a node to have some package and config installed, and once that is done, >> some config to be done on anothe

Re: [Puppet Users] Possible to disable puppets internal CA, and use wildcard certs from DigiCert CA?

2011-02-01 Thread KC Braunschweig
On Fri, Jan 28, 2011 at 11:02 AM, Daniel Pittman wrote: > On Fri, Jan 28, 2011 at 06:47, Jed wrote: >> is this possible? > > Probably not usefully to you, no. You might better aim to integrate a > stage into your host build process that will generate the certificate > on the server and allow it t

[Puppet Users] Two file mode bugs in puppet 0.25?

2011-02-01 Thread Barry Jaspan
I'm using puppet 0.25.5 and just discovered two file resource bugs. I suspect the bugs did not exist in 0.24 because the code were using that triggers them has been the same for a long time and while it is possible we did not notice the problem earlier, it seems unlikely as it has been triggering f

[Puppet Users] Re: Puppet 2.6 on Solaris

2011-02-01 Thread Jon
Hi, Have you thought about building the Solaris packages against the Oracle provided Sun Web Stack. This replaced the older Coolstack. It just means that you don't have to own and package Ruby for Solaris. https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_SMI-Site/en_US/-/USD/ViewProduct

[Puppet Users] Re: certificate verify failed

2011-02-01 Thread sl0n
Hi, Try the following in puppet.conf on the client side: [main] server = puppet.test.ch certname =puppet.test.ch ... ... Vladimir On Feb 1, 5:26 pm, Pascal wrote: > Yes, they have exact the same system time. > > maybe this /var/log/puppet/masterhttp.log will give you more > information: > (cli

Re: [Puppet Users] Passenger problem with /etc/puppet/ssl

2011-02-01 Thread Denmat
Hi, You only need to set the location of the ssl directory in the [main] section of the puppet.. If you are using puppet with apache/passenger you need to put apache in the puppet group. Create the ssl directory first by running puppetmasterd once. The other thing to watch is the versions o

[Puppet Users] Puppet Enterprise

2011-02-01 Thread Luke Kanies
Hi all, We here at Puppet Labs are proud to announce Puppet Enterprise, which we launched today: http://www.puppetlabs.com/puppet-enterprise/ We've worked pretty hard to get it out the door, and in particular our team has worked very hard to get great packages for all of the Puppet projects an

[Puppet Users] Re: apache frontend not running puppetmaster.

2011-02-01 Thread trey85stang
Jeff, Thanks for answering this question in detail. It is greatly appreciated. I have everything working as is now but want to get the ssl signing corrected as I just point to a dedicated ca, if I can get this handled all through the mod_ssl proxy that would be ideal. Ill post back with any fur

Re: [Puppet Users] Re: puppetmaster 100%cpu usage on 2.6 (not on 0.24)

2011-02-01 Thread Udo Waechter
On 01.02.2011, at 18:14, Brice Figureau wrote: > On Tue, 2011-02-01 at 10:30 -0500, Ashley Penney wrote: >> This is the crux of the situation for me too - Puppetlabs blame it on >> a Ruby bug that hasn't been resolved with RHEL6 (in my situation) but >> this wasn't an issue until .3 for me too.

Re: [Puppet Users] Re: puppetmaster 100%cpu usage on 2.6 (not on 0.24)

2011-02-01 Thread Brice Figureau
On 01/02/11 20:35, Ashley Penney wrote: > Yes, it didn't happen with the earlier versions of 2.6. If it's easy for you to reproduce the issue you really should git bisect the issue and tell puppetlabs what commit is the root cause (the differences between 2.6.2 and 2.6.3 is not that big). This way

Re: [Puppet Users] Re: puppetmaster 100%cpu usage on 2.6 (not on 0.24)

2011-02-01 Thread Ashley Penney
Yes, it didn't happen with the earlier versions of 2.6. On Tue, Feb 1, 2011 at 12:14 PM, Brice Figureau < brice-pup...@daysofwonder.com> wrote: > On Tue, 2011-02-01 at 10:30 -0500, Ashley Penney wrote: > > This is the crux of the situation for me too - Puppetlabs blame it on > > a Ruby bug that h

Re: [Puppet Users] problems creating a user

2011-02-01 Thread Matthew Black
The virtual user is in a class, that class is included at the basenode. I did put a log message in there and on the master it is loading the class. From the master perspective it looks like everything is fine. On Tue, Feb 1, 2011 at 1:50 PM, Nan Liu wrote: > Really silly question here, is the vir

Re: [Puppet Users] problems creating a user

2011-02-01 Thread Nan Liu
Really silly question here, is the virtual user in a class? In the basenode are you including the class that contains the virtual user? If the virtual user is in a class, can you put a notify resource in there to make sure the class is included as expected? HTH, Nan On Tue, Feb 1, 2011 at 10:39

Re: [Puppet Users] problems creating a user

2011-02-01 Thread Matthew Black
I tried what you suggested and it seems to have made no difference, I am still getting the same error. On Tue, Feb 1, 2011 at 1:30 PM, Jeff McCune wrote: > On Tue, Feb 1, 2011 at 1:20 PM, Matthew Black wrote: >> Inside my basenode definiton, which is being inherited by another node >> definition

Re: [Puppet Users] problems creating a user

2011-02-01 Thread Jeff McCune
On Tue, Feb 1, 2011 at 1:20 PM, Matthew Black wrote: > Inside my basenode definiton, which is being inherited by another node > definition it is doing > > realize(User["admin"],Group["admin"]) > > The strange thing is if remove the specified node definition and just > have the basenode it works co

Re: [Puppet Users] problems creating a user

2011-02-01 Thread Matthew Black
Inside my basenode definiton, which is being inherited by another node definition it is doing realize(User["admin"],Group["admin"]) The strange thing is if remove the specified node definition and just have the basenode it works correctly. On Tue, Feb 1, 2011 at 12:59 PM, Jeff McCune wrote: > H

Re: [Puppet Users] problems creating a user

2011-02-01 Thread Jeff McCune
How are you realizing the user? -- Jeff McCune - (+1-503-208-4484) On Feb 1, 2011, at 12:54 PM, Matt wrote: > I have this problem where I'm trying to create a user and the error > message I am getting is: > > err: Could not run Puppet configuration client: Could not find user > admin > > Here i

[Puppet Users] problems creating a user

2011-02-01 Thread Matt
I have this problem where I'm trying to create a user and the error message I am getting is: err: Could not run Puppet configuration client: Could not find user admin Here is what I have in the manifest and I am realizing the user at the basenode level and all my nodes inherit the basenode.

Re: [Puppet Users] Passenger problem with /etc/puppet/ssl

2011-02-01 Thread Dave Augustus
Hello Mark, I ran into trouble using symlinks with puppet/puppetmaster as puppet would manage them directly and actually remove them. I know there is the ability to tell puppet NOT to do this but I didn't explore that option. At this point, I have puppetmaster/passenger now running on /etc/p

Re: [Puppet Users] Re: puppetmaster 100%cpu usage on 2.6 (not on 0.24)

2011-02-01 Thread Brice Figureau
On Tue, 2011-02-01 at 10:30 -0500, Ashley Penney wrote: > This is the crux of the situation for me too - Puppetlabs blame it on > a Ruby bug that hasn't been resolved with RHEL6 (in my situation) but > this wasn't an issue until .3 for me too. I feel that fact that many > of us have this problem s

Re: [Puppet Users] Passenger problem with /etc/puppet/ssl

2011-02-01 Thread Mark Stanislav
Dave, Just wondering if you tried to make a temporary symlink from /var/lib/puppet/ssl to /etc/puppet/ssl to see if the error changes or goes away (just to narrow the scope)? Also, take a look at http://blog.kumina.nl/2011/01/puppet-on-puppetmaster/ -- perhaps you're missing an ssldir declarat

[Puppet Users] Passenger problem with /etc/puppet/ssl

2011-02-01 Thread Dave Augustus
I have been working on converting puppetmaster to use passenger and I can't seem to get past this error message: Could not prepare for execution: Got 1 failure(s) while initializing: change from absent to directory failed: Could not set 'directory on ensure: Permission denied - /etc/puppet/ssl

[Puppet Users] Re: certificate verify failed

2011-02-01 Thread Pascal
Yes, they have exact the same system time. maybe this /var/log/puppet/masterhttp.log will give you more information: (client is client1.test.ch, server is puppet.test.ch) [2011-02-01 17:00:08] INFO Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature A

Re: [Puppet Users] certificate verify failed

2011-02-01 Thread Martin Alfke
Hi, is the time on both hosts (puppet master and puppet client) in sync? see http://projects.puppetlabs.com/projects/1/wiki/Certificates_And_Security Kind regards, Martin On Feb 1, 2011, at 2:59 PM, Pascal wrote: > Hi, > > I use Debian 5.0.8 with puppet 6.2.6. > I've got the following probl

Re: [Puppet Users] Re: puppetmaster 100%cpu usage on 2.6 (not on 0.24)

2011-02-01 Thread Ashley Penney
This is the crux of the situation for me too - Puppetlabs blame it on a Ruby bug that hasn't been resolved with RHEL6 (in my situation) but this wasn't an issue until .3 for me too. I feel that fact that many of us have this problem since upgrading means it can be fixed within Puppet, rather than

Re: [Puppet Users] certificate verify failed

2011-02-01 Thread Martin Samm
try putting an entry for puppet into hosts; its detailed somewhere in the docs i think On Tue, Feb 1, 2011 at 1:59 PM, Pascal wrote: > Hi, > > I use Debian 5.0.8 with puppet 6.2.6. > I've got the following problem after installing puppet and registering > the certificates: > > > client1:/home/pa

[Puppet Users] end of file reached

2011-02-01 Thread walexey
hello everybody! server: [awasilyev@puppet ~]$ rpm -q puppet-server puppet-server-2.6.4-0.7.el5 client: [root@opensource ~]# rpm -q puppet puppet-2.6.4-0.7.el5 [root@opensource ~]# puppetd -t info: Creating a new SSL key for opensource.vm.griddynamics.net warning: peer certificate won't be verif

Re: [Puppet Users] Puppet 2.6 on Solaris

2011-02-01 Thread Rudy Gevaert
On 01/31/2011 08:22 PM, Nan Liu wrote: Hi! Gary seems kind enough to provide the build script, so I was able to package 2.6.4: http://dl.dropbox.com/u/1075709/puppet-2.6.4%2CREV%3D2011.01.04-SunOS5.10-all-CSW.pkg Please note this is not official and only briefly tested, please feel free to prov

[Puppet Users] certificate verify failed

2011-02-01 Thread Pascal
Hi, I use Debian 5.0.8 with puppet 6.2.6. I've got the following problem after installing puppet and registering the certificates: client1:/home/pascal# puppetd --server=puppet.test.ch --debug --no- daemonize --verbose --waitforcert 60 debug: Failed to load library 'selinux' for feature 'selinux

[Puppet Users] Is it possible to configure multi-master/circular replication for MySQL?

2011-02-01 Thread Phillip B Oldham
Is it possible for puppet to configure a set of MySQL masters and manage circular replication, so that if additional master nodes are required (or need to be stopped & moved) puppet can add them to the set and bring them "up to date"? How would it cope with unresponsive nodes; could puppet reconfig

Re: [Puppet Users] Run stage introduces dependency cycle

2011-02-01 Thread Felix Frank
On 01/28/2011 11:51 PM, Dan Urist wrote: > On Fri, 28 Jan 2011 11:40:38 -0800 > Nan Liu wrote: > >> You can require disable_upstart class as a conditional by operating >> system and it should be part of your ssh module rather than a separate >> class. > > If I understand correctly, you mean I sh

Re: [Puppet Users] Re: puppetmaster 100%cpu usage on 2.6 (not on 0.24)

2011-02-01 Thread Waechter Udo
Hi, On 31.01.2011, at 22:50, John Warburton wrote: > On 1 February 2011 08:43, Brice Figureau > wrote: > On 31/01/11 19:11, Udo Waechter wrote: > > Do you use storeconfigs? > > Speaking of resource hogs, do you run the puppet labs dashboard on the same > host? I had a similar setup (on crus

Re: [Puppet Users] Re: puppetmaster 100%cpu usage on 2.6 (not on 0.24)

2011-02-01 Thread Waechter Udo
Hi, On 31.01.2011, at 22:43, Brice Figureau wrote: > On 31/01/11 19:11, Udo Waechter wrote: >> [..] >> We use passenger 2.2.11debian-2 and apache 2.2.16-3, ruby1.8 from >> squeeze. > > I see a pattern here. It seems Micah (see a couple of mails above in > this thread) has about the same setup, e

[Puppet Users] Puppetd sometimes not surviving a reload

2011-02-01 Thread Martijn Grendelman
Hi, I have one Puppet agent (2.6.3 on Ubuntu) that sometimes does not seem to survive a reload (SIGHUP). The agent is reloaded by 'logrotate' every morning, and usually this works OK, but just sometimes, puppetd gives up, without writing anything extraordinary to syslog (without any debug options)

Re: [Puppet Users] Re: accessing puppet config variables inside a manifest

2011-02-01 Thread R.I.Pienaar
- Original Message - > On Jan 31, 10:09 am, Nan Liu wrote: > > On Mon, Jan 31, 2011 at 9:06 AM, Gabriel Filion > > wrote: > > Yeah, that would make manifests a lot more flexible. Here's a > > function > > that should work for this purpose and potentially other puppet > > configuration v

[Puppet Users] Re: accessing puppet config variables inside a manifest

2011-02-01 Thread donavan
On Jan 31, 10:09 am, Nan Liu wrote: > On Mon, Jan 31, 2011 at 9:06 AM, Gabriel Filion wrote: > Yeah, that would make manifests a lot more flexible. Here's a function > that should work for this purpose and potentially other puppet > configuration variables as well: You can also wedge this in to

[Puppet Users] Re: Puppet delegation / teams

2011-02-01 Thread donavan
On Jan 31, 3:05 am, Pieter Baele wrote: > - doing some sort of check if their recipes / templates work. A stronger check than --parseonly is to use a tool like cucumber- puppet. It's very simple to verify that a nodes catalog can actually compile, not just parse. Additionally you can do things li