Re: [Puppet Users] Re: Puppetmasterd not receiving certificate request

2011-02-14 Thread Nan Liu
On Mon, Feb 14, 2011 at 10:12 PM, mark risher wrote: > Thanks for the follow-up. Here is the puppetmasterd --genconf output: > http://pastebins.com/index.php?show=568; I have not made any changes > from the default, Ubuntu package installation, so the actual > puppet.conf file is just the pathname

[Puppet Users] Re: Puppetmasterd not receiving certificate request

2011-02-14 Thread mark risher
Thanks for the follow-up. Here is the puppetmasterd --genconf output: http://pastebins.com/index.php?show=568; I have not made any changes from the default, Ubuntu package installation, so the actual puppet.conf file is just the pathnames. I've been running the server using the `/etc/init.d/puppet

Re: [Puppet Users] force directory to symlink, but only if empty

2011-02-14 Thread Nan Liu
On Mon, Feb 14, 2011 at 6:08 PM, Rich Rauenzahn wrote: > On Mon, Feb 14, 2011 at 5:20 PM, Nan Liu wrote: >> On Mon, Feb 14, 2011 at 5:17 PM, Rich Rauenzahn wrote: >>> I was surprised to find that >>> >>> file { $foo: >>>    ensure => symlink, >>>    target  => '/tmp/foo', >>> } >>> >>> doesn't r

Re: [Puppet Users] Re: Puppetmasterd not receiving certificate request

2011-02-14 Thread Jeff McCune
On Mon, Feb 14, 2011 at 11:25 PM, mark risher wrote: > If this helps, when I run `puppetd -d` I get a bunch of debug log > statements that may be pertinent: http://pastebins.com/index.php?show=567 As much information as you can provide about how you're running the puppet master, what it's configu

[Puppet Users] Re: Puppetmasterd not receiving certificate request

2011-02-14 Thread mark risher
If this helps, when I run `puppetd -d` I get a bunch of debug log statements that may be pertinent: http://pastebins.com/index.php?show=567 Thx, /m -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-user

Re: [Puppet Users] Re: Puppetmasterd not receiving certificate request

2011-02-14 Thread Jeff McCune
On Mon, Feb 14, 2011 at 11:19 PM, mark risher wrote: > Thanks for the suggestion. I set the /etc/host but that doesn't appear > any different from specifying --server xyz on the command line; my > client definitely seems to reach the server but still no certificate > is issued and the manifest fil

[Puppet Users] Re: Puppetmasterd not receiving certificate request

2011-02-14 Thread mark risher
Thanks for the suggestion. I set the /etc/host but that doesn't appear any different from specifying --server xyz on the command line; my client definitely seems to reach the server but still no certificate is issued and the manifest file doesn't get downloaded: --- CLIENT mrisher@events1001:~$ s

[Puppet Users] Re: [Puppet-dev] Re: ANNOUNCE: Puppet 2.6.5 - Release Candidate 4 available!

2011-02-14 Thread Jacob Helwig
On Mon, 14 Feb 2011 21:00:02 -0500, Todd Zullinger wrote: > > Jacob Helwig wrote: > > We're back with a maintenance release: 2.6.5. This release addresses a > > number of bugs in the 2.6.x branch and adds a handful of features and > > documentation updates. > > For those using Fedora or RHEL/Cent

Re: [Puppet Users] Puppetmasterd not receiving certificate request

2011-02-14 Thread Basil Kurian
Then try puppetd --test on client On 15 February 2011 09:24, Basil Kurian wrote: > Set the IP of puppet master as hostname "puppet" on /etc/hosts file of > client > > That is something like > > 192.168.2.100 puppet.example.local puppet > > > On 15 February 2011 07:25, mark risher wrote: > >>

Re: [Puppet Users] Puppetmasterd not receiving certificate request

2011-02-14 Thread Basil Kurian
Set the IP of puppet master as hostname "puppet" on /etc/hosts file of client That is something like 192.168.2.100 puppet.example.local puppet On 15 February 2011 07:25, mark risher wrote: > Hi: I'm trying to configure Puppet on Ubuntu, and strangely I am never > able to generate a certificate

Re: [Puppet Users] force directory to symlink, but only if empty

2011-02-14 Thread Rich Rauenzahn
On Mon, Feb 14, 2011 at 5:20 PM, Nan Liu wrote: > On Mon, Feb 14, 2011 at 5:17 PM, Rich Rauenzahn wrote: >> I was surprised to find that >> >> file { $foo: >>    ensure => symlink, >>    target  => '/tmp/foo', >> } >> >> doesn't replace $foo if $foo is an empty directory. >> >> Is there a particu

[Puppet Users] Puppetmasterd not receiving certificate request

2011-02-14 Thread mark risher
Hi: I'm trying to configure Puppet on Ubuntu, and strangely I am never able to generate a certificate because my server never shows any pending certificate requests. Put differently, on the server I am running puppetmasterd and on the client I am able to connect to the server, but the client conti

[Puppet Users] Re: ANNOUNCE: Puppet 2.6.5 - Release Candidate 4 available!

2011-02-14 Thread Todd Zullinger
Jacob Helwig wrote: > We're back with a maintenance release: 2.6.5. This release addresses a > number of bugs in the 2.6.x branch and adds a handful of features and > documentation updates. For those using Fedora or RHEL/CentOS, I've updated the yum repos at: http://tmz.fedorapeople.org/repo/

Re: [Puppet Users] force directory to symlink, but only if empty

2011-02-14 Thread Nan Liu
On Mon, Feb 14, 2011 at 5:17 PM, Rich Rauenzahn wrote: > I was surprised to find that > > file { $foo: >    ensure => symlink, >    target  => '/tmp/foo', > } > > doesn't replace $foo if $foo is an empty directory. > > Is there a particular combination of options to the file resource that > would

[Puppet Users] force directory to symlink, but only if empty

2011-02-14 Thread Rich Rauenzahn
I was surprised to find that file { $foo: ensure => symlink, target => '/tmp/foo', } doesn't replace $foo if $foo is an empty directory. Is there a particular combination of options to the file resource that would replace the directory with the symlink if empty, but wouldn't filebucket

Re: [Puppet Users] Re: puppet 2.6.5-rc1 Parameter type failed: type is read-only

2011-02-14 Thread Nigel Kersten
On Mon, Feb 14, 2011 at 3:30 PM, John Warburton wrote: > On 9 February 2011 21:57, John Warburton wrote: >> >> OK - I found the issue. Because 2.6.x gives us nice human readable(ish) >> catalogs, I compiled mine and the 'random' hits were all for directories. >> Re-reading the manifest, I see tho

Re: [Puppet Users] fork from Collection and Realizing resources (puppet-dev)

2011-02-14 Thread Dan Bode
On Mon, Feb 14, 2011 at 4:14 AM, luke.bigum wrote: > Hi list (specifically Dan), > > I was interested in the snippet you provided in the recent thread > "Collection and Realizing resources" and how it could be used to > safely include both 'app' and 'db' class without causing a conflict in > the u

[Puppet Users] Re: puppet 2.6.5-rc1 Parameter type failed: type is read-only

2011-02-14 Thread John Warburton
On 9 February 2011 21:57, John Warburton wrote: > OK - I found the issue. Because 2.6.x gives us nice human readable(ish) > catalogs, I compiled mine and the 'random' hits were all for directories. > Re-reading the manifest, I see those directories in the error messages all > had "type => directo

[Puppet Users] ANNOUNCE: Puppet 2.6.5 - Release Candidate 4 available!

2011-02-14 Thread Jacob Helwig
We're back with a maintenance release: 2.6.5. This release addresses a number of bugs in the 2.6.x branch and adds a handful of features and documentation updates. This release candidate includes only test, and documentation changes. This release candidate is available for download at: http://pu

Re: [Puppet Users] Re: Master-less : What do I lose?

2011-02-14 Thread tom
On 09/02/11 20:42, Kevin Beckford wrote: It would be non trivial to keep the configuration data isolated in masterless mode if you have a desire to segment and isolate configuration data by system, or even system roles (i.e. my website database system should not contain puppet ma

Re: [Puppet Users] Re: Master-less : What do I lose?

2011-02-14 Thread Nigel Kersten
On Wed, Feb 9, 2011 at 8:19 AM, Nan Liu wrote: > Another key difference is the agent only receives a catalog in > master/agent mode. In masterless mode you must provide the puppet > manifest/templates to each client system. The catalog is system > specific and does not contain any configuration i

[Puppet Users] Re: Master-less : What do I lose?

2011-02-14 Thread jblaine
On Wednesday, February 9, 2011 3:32:07 PM UTC-5, Kevin Beckford wrote: > > I think it depends on the use case. I much prefer the git method. I'm > trying to do it the classic way this week, but there is a lot of decisions > to deploy an efficient puppetmaster which add complexity and unwanted

[Puppet Users] Re: Master-less : What do I lose?

2011-02-14 Thread jblaine
On Wednesday, February 9, 2011 8:22:02 PM UTC-5, DaveQB wrote: > > One thing we have is mulitple NFS mounts common to all machines. So > moving to serverless was quite painless and has so far been a HUGE > improvement. > This is what I was planning to do as well (once I understand the other ma

[Puppet Users] Re: Master-less : What do I lose?

2011-02-14 Thread jblaine
Wow, I'm glad this generated some discussion. I had almost given up on my post/thread. Thanks for the replies, everyone. Jordan, for context, we've been using Cfengine 2.x for 12 years now on ~180 boxes (nowadays) which I was wholly responsible for and continue to be (for lame reasons I won't

Re: [Puppet Users] redirect the dashboard with apache

2011-02-14 Thread Jeff McCune
On Feb 14, 2011, at 8:09 AM, Vincent wrote: > Hi > > Is it possible to configure apache to redirect to the dashboard ? > Yes but it may be better to just have the dashboard run on the port you want rather than 3000 > I have try the config : > > ProxyPass/http://localhost:3000

Re: [Puppet Users] Puppet in the DMZ

2011-02-14 Thread Daniel Pittman
On Mon, Feb 14, 2011 at 01:35, Thorsten Biel wrote: > On Feb 11, 2011, at 20:00, Daniel Pittman wrote: =>> On Fri, Feb 11, 2011 at 00:40, Thorsten Biel wrote: >>> On Feb 11, 2011, at 07:25, John Warburton wrote: >>> How do people get around the "common" rule that DMZ servers should not

Re: [Puppet Users] certificate does not match

2011-02-14 Thread Patrick
On Feb 14, 2011, at 8:43 AM, Felix Frank wrote: > Hi, > > from afar, it's hard to tell what your specific problem is. > > Has your puppetmaster generated a new CSR for the machine? Maybe you > have to sign the new certificate; the master still stores a valid, > signed certificate for the machin

Re: [Puppet Users] redirect the dashboard with apache

2011-02-14 Thread Daniel Pittman
Hey. Your redirect lost the / between the service and the uri; add that to your ProxyPass lines and it should, I think, work. Regards, Daniel -- Puppet Labs Developer –http://puppetlabs.com Daniel Pittman Contact me via gtalk, email, or phone: +1 (877) 575-9775 Sent from a mobile device. Ple

Re: [Puppet Users] Re: [Puppet-dev] Collections and Realizing Resources

2011-02-14 Thread Nigel Kersten
On Mon, Feb 14, 2011 at 8:56 AM, Dan Bode wrote: > > > On Mon, Feb 14, 2011 at 6:49 AM, Nigel Kersten wrote: > >> On Sun, Feb 13, 2011 at 9:59 PM, Dan Bode wrote: >> >>> >>> We have only been teaching <| |> in the puppetmaster training as a way to >>> realize virtual resources. We do not teach t

Re: [Puppet Users] exec: creates overrides onlyif?

2011-02-14 Thread Daniel Pittman
Hey. I think this discussion totally deserves a feature/bug report in redmine, because both positions are reasonable. They do point to a hole where our specifation seems vague, and where we *should* have made a decision: right now we have a real chance of changing whatever the behaviour is by acci

Re: [Puppet Users] exec: creates overrides onlyif?

2011-02-14 Thread Felix Frank
On 02/14/2011 05:27 PM, Matthew Pounsett wrote: > > On 2011/02/14, at 11:12, Felix Frank wrote: > >> On 02/10/2011 08:47 PM, Matthew Pounsett wrote: >>> >>> The docs are vague on how the two interact.. but it seems to me that >>> 'creates' will override 'onlyif' in an exec clause. i.e. if the f

Re: [Puppet Users] Re: [Puppet-dev] Collections and Realizing Resources

2011-02-14 Thread Dan Bode
On Mon, Feb 14, 2011 at 6:49 AM, Nigel Kersten wrote: > On Sun, Feb 13, 2011 at 9:59 PM, Dan Bode wrote: > >> >> We have only been teaching <| |> in the puppetmaster training as a way to >> realize virtual resources. We do not teach that it is possible to override >> attributes with this syntax

Re: [Puppet Users] certificate does not match

2011-02-14 Thread Felix Frank
Hi, from afar, it's hard to tell what your specific problem is. Has your puppetmaster generated a new CSR for the machine? Maybe you have to sign the new certificate; the master still stores a valid, signed certificate for the machine, but the client has no use for it. You need to convince your m

Re: [Puppet Users] exec: creates overrides onlyif?

2011-02-14 Thread Matthew Pounsett
On 2011/02/14, at 11:12, Felix Frank wrote: > On 02/10/2011 08:47 PM, Matthew Pounsett wrote: >> >> The docs are vague on how the two interact.. but it seems to me that >> 'creates' will override 'onlyif' in an exec clause. i.e. if the file named >> by 'creates' exists, then 'onlyif' is ignor

Re: [Puppet Users] exec: creates overrides onlyif?

2011-02-14 Thread Felix Frank
On 02/10/2011 08:47 PM, Matthew Pounsett wrote: > > The docs are vague on how the two interact.. but it seems to me that > 'creates' will override 'onlyif' in an exec clause. i.e. if the file named > by 'creates' exists, then 'onlyif' is ignored. Is someone able to confirm > that? I cannot p

[Puppet Users] Splitting PuppetMaster from PuppetCA config help

2011-02-14 Thread linuxbsdfreak
Hello All, I am running puppetmaster with nginx and unicorn. I am trying to split puppet master from the Puppet CA. The puppetCA is running well with the following nginx config: user nginx; worker_processes 10; worker_rlimit_nofile 10; error_log /var/log/nginx/error.log debug; pid

[Puppet Users] redirect the dashboard with apache

2011-02-14 Thread Vincent
Hi Is it possible to configure apache to redirect to the dashboard ? I have try the config : ProxyPass/http://localhost:3000 ProxyPassReverse /http://localhost:3000 I ve got the foolowing error when I try to get the nodes pages : Proxy Error The proxy server receive

Re: [Puppet Users] Re: [Puppet-dev] Collections and Realizing Resources

2011-02-14 Thread Nigel Kersten
On Sun, Feb 13, 2011 at 9:59 PM, Dan Bode wrote: > > We have only been teaching <| |> in the puppetmaster training as a way to > realize virtual resources. We do not teach that it is possible to override > attributes with this syntax as well: <| |> {} (at least in part b/c the > implications/non-

[Puppet Users] Re: Check package version in order to proceed with installation (err: Could not update: is already installed)

2011-02-14 Thread jcbollinger
On Feb 14, 2:35 am, Jan wrote: > Hi *, > > no more ideas? :) Whenever you want to use information about the state of a node to influence the catalog supplied to that node, the Puppet Way is to use facts. In this case, it would need to be a custom fact. It wouldn't be too hard to wrap a custom

[Puppet Users] fork from Collection and Realizing resources (puppet-dev)

2011-02-14 Thread luke.bigum
Hi list (specifically Dan), I was interested in the snippet you provided in the recent thread "Collection and Realizing resources" and how it could be used to safely include both 'app' and 'db' class without causing a conflict in the user 'bob'. I can't quite see how that's possible, even using cl

Re: [Puppet Users] puppetrun :: "HTTP-Error: 500 Internal Server Error" (w/ Passenger)

2011-02-14 Thread CraftyTech
Thanks for the replies... When I run puppetrun with either --configprint confdir or --genconfig, I only get "Finished" as the output, nothing else. It doesn't show me any configuration parameters... -- You received this message because you are subscribed to the Google Groups "Puppet Users" g

[Puppet Users] Puppet configuration for MySQL master-slave replication

2011-02-14 Thread Basil Kurian
I 'm a beginner to puppet . I know only basic stuffs about puppet. I would like to create a puppet configuration in which the master's configuration can be tweaked so as to perform replication and new mysql slave nodes will be automatically configured to become replica I'm able to perform some b

Re: [Puppet Users] Puppet in the DMZ

2011-02-14 Thread Thorsten Biel
On Feb 11, 2011, at 20:00, Daniel Pittman wrote: > On Fri, Feb 11, 2011 at 00:40, Thorsten Biel wrote: >> On Feb 11, 2011, at 07:25, John Warburton wrote: >> >>> How do people get around the "common" rule that DMZ servers should not >>> initiate network connections back to the internal network

Re: [Puppet Users] Check package version in order to proceed with installation (err: Could not update: is already installed)

2011-02-14 Thread Jan
Hi *, no more ideas? :) Jan On 02/11/2011 10:24 PM, Jan wrote: > Hi Patrick, > > On 02/11/2011 07:40 PM, Patrick wrote: > > [...] > >> 1) So, just some random advice. If you're using the same server to >> serve files and catalogs, you can skip listing the server and just >> use 3 slashes lik

Re: [Puppet Users] Puppet agent on debian 6

2011-02-14 Thread Daniel Pittman
On Mon, Feb 14, 2011 at 00:02, Jli- wrote: > any note on puppet agent running on debian 6. It seems that there's an > error after upgrading it from debian 5 to debian 6 Hey there. So, we are not aware of any particular restrictions there. Can you give us some more detail? Is there a Debian bu

[Puppet Users] Puppet agent on debian 6

2011-02-14 Thread Jli-
hi guys, any note on puppet agent running on debian 6. It seems that there's an error after upgrading it from debian 5 to debian 6 -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com