[Puppet Users] Re: Error 400 on SERVER: Could not intern from yaml: can't convert Symbol into String

2011-02-22 Thread donavan
On Feb 15, 5:21 pm, Patrick kc7...@gmail.com wrote: Does anyone have a guess if this bug is in the client, the master, or dashboard?  My report value is reports = http, store.    If the error was originally from dashboard, would the master have failed to save the file because the order

Re: [Puppet Users] Re: Error 400 on SERVER: Could not intern from yaml: can't convert Symbol into String

2011-02-22 Thread Patrick
On Feb 22, 2011, at 12:06 AM, donavan wrote: On Feb 15, 5:21 pm, Patrick kc7...@gmail.com wrote: Does anyone have a guess if this bug is in the client, the master, or dashboard? My report value is reports = http, store.If the error was originally from dashboard, would the master have

Re: [Puppet Users] header too long (OpenSSL::X509::CRLError) ?

2011-02-22 Thread Felix Frank
On 02/21/2011 06:21 PM, vincent wrote: I have removed the ca_crl.pem puppet master has create a new one but some hosts are not working now: host1 OK : # puppetd -tv info: Caching catalog for host1.bc info: Applying configuration version '1298308566' notice: Finished catalog run in 0.06

Re: [Puppet Users] a rule being run every invocation despite no change

2011-02-22 Thread Tim Connors
On Mon, 21 Feb 2011, Felix Frank wrote: On 02/19/2011 10:23 AM, Patrick wrote: If so, you probably need to change the syntax in your define. I'm hoping there's a syntax that tells puppet to join 2 arrays. If the provider in question fails to flatten the array properly, you're in

[Puppet Users] Re: error: Could not intern from pson: source did not contain any PSON!

2011-02-22 Thread Jed
anyone know what the heck this can be ...is it indeed a bug ? --- i;ve seen some history that is was a bug on the 0.24/5 platforms ... but my server and my client are from 2.6.4 (they were built from the same source at the same time, using RPM SPECs) Feb 22 07:20:44 puppetclient01

[Puppet Users] Re: How to add ubuntu ppa

2011-02-22 Thread Rawler
What about keys? On Jan 14, 12:11 am, Nigel Kersten ni...@puppetlabs.com wrote: On Thu, Jan 13, 2011 at 2:07 PM, Kevin Beckford lazy...@gmail.com wrote: Now, I noticed the yumrepo, but this is of little use today, I need to add an ubuntu ppa ( a few really ) to my installation.  How would

Re: [Puppet Users] Re: How to add ubuntu ppa

2011-02-22 Thread Nigel Kersten
On Tue, Feb 22, 2011 at 12:08 AM, Rawler ulrik.mikaels...@gmail.com wrote: What about keys? Run an exec that adds the key. How would you normally solve this ? On Jan 14, 12:11 am, Nigel Kersten ni...@puppetlabs.com wrote: On Thu, Jan 13, 2011 at 2:07 PM, Kevin Beckford lazy...@gmail.com

Re: [Puppet Users] Re: How to add ubuntu ppa

2011-02-22 Thread Mark Stanislav
On Feb 22, 2011, at 10:09 AM, Nigel Kersten wrote: On Tue, Feb 22, 2011 at 12:08 AM, Rawler ulrik.mikaels...@gmail.com wrote: What about keys? Run an exec that adds the key. How would you normally solve this ? Indeed, this is what I have done previously. The other option is to use a File

[Puppet Users] Problem with module

2011-02-22 Thread Ashley Penney
Hi, I'm having a problem with a module that works on my production servers, but is giving me grief when ran from scratch. When I run the client I get: [root@hlsdevcms1 puppet]# puppetd -tv info: Retrieving plugin info: Loading facts in apache-ports info: Loading facts in location info: Loading

[Puppet Users] provisioning bare metal (best practices)

2011-02-22 Thread David Kavanagh
I'm about to start playing with Kickstart. I never really had to provision bare servers beyond a normal OS install, so I need something to use along with Puppet. Is there a general consensus on what the best option is? I'd need to set up the node with IP/hostname/role. (I have a custom fact for

Re: [Puppet Users] provisioning bare metal (best practices)

2011-02-22 Thread Trevor Vaughan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Why not use DHCP? This is what it's for. The general standard that I've seen is DHCP + KS + modification scripts/puppet/whatever Trevor On 02/22/2011 10:47 AM, David Kavanagh wrote: I'm about to start playing with Kickstart. I never really had to

[Puppet Users] Re: error: Could not intern from pson: source did not contain any PSON!

2011-02-22 Thread Jed
addtional info... ruby 1.8.7 p299 built from source rubygem 1.5.7 latest facter version centos 5.5 (latest yum update) On Feb 22, 8:19 am, Jed jedbl...@gmail.com wrote: anyone know what the heck this can be ...is it indeed a bug ?   --- i;ve seen some history that is was a bug on the 0.24/5

Re: [Puppet Users] provisioning bare metal (best practices)

2011-02-22 Thread Jonathan Gazeley
We have a small pool of DHCP IP addresses for use only in the build process. This is our process: 1. We boot the servers from PXE network boot 2. They get one of the temporary IPs 3. They start a CentOS network install using a kickstart file with the bare minimum of packages selected,

Re: [Puppet Users] provisioning bare metal (best practices)

2011-02-22 Thread Mohit Chawla
Foreman could come in handy. -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more

Re: [Puppet Users] provisioning bare metal (best practices)

2011-02-22 Thread Brian Gallew
Never forget the DHCP does NOT necessarily mean dynamic addresses. Depending upon your corporate culture, it may be perfectly acceptable for DHCP to hand out statically assigned addresses to your hosts. This would allow your build process to be easy, and you can have the host never DHCP again

Re: [Puppet Users] provisioning bare metal (best practices)

2011-02-22 Thread David Kavanagh
I thought about DHCP for static addresses. I'd need the MAC for each machine though. For now, I'm worrying about plugging some media or doing network boot on machines by hand. I suppose I'll need to do something on the host to indicate what the machine role will be. In any case, I could simply use

[Puppet Users] Question about puppet dashboard LDAP authentication and authroziation

2011-02-22 Thread TJ Yang
Hi I am very new to puppet, I have been reading online docs at http://docs.puppetlabs.com/, but I couldn't find the answer to my following question. Please let me know the URL if I missed it. From R1 link, looks like we can put LDAP authentication when accessing the dashboard URL. The question

Re: [Puppet Users] Could not request certificate: undefined method `closed?' for nil:NilClass'

2011-02-22 Thread Paul Willis
On 21 Feb 2011, at 15:49, Felix Frank wrote: On 02/21/2011 05:39 AM, 暁華 管 wrote: Hi, I installed puppet 0.25.4 on ubuntu 10.04. It was ok until puppet client and server were intalled. But when I tried to execute the following command, the error, Could not request certificate: undefined

Re: [Puppet Users] provisioning bare metal (best practices)

2011-02-22 Thread vagn scott
Oh, great timing! I'm working on pretty much the same question. I have used FAI and Opsware, and homebrewed scripts to do provisioning in the past. I have never been all that happy with any of them, and am taking another look at the problem to try to get to as simple and portable a solution

Re: [Puppet Users] Could not request certificate: undefined method `closed?' for nil:NilClass'

2011-02-22 Thread Patrick
On Feb 22, 2011, at 9:09 AM, Paul Willis wrote: On 21 Feb 2011, at 15:49, Felix Frank wrote: On 02/21/2011 05:39 AM, 暁華 管 wrote: Hi, I installed puppet 0.25.4 on ubuntu 10.04. It was ok until puppet client and server were intalled. But when I tried to execute the following command, the

Re: [Puppet Users] provisioning bare metal (best practices)

2011-02-22 Thread James A. Peltier
- Original Message - | I thought about DHCP for static addresses. I'd need the MAC for each | machine snip This is not necessarily true. If you configure the client to send a requested hostname it will not require you to register the MAC address, although, as per the usual this is a

Re: [Puppet Users] provisioning bare metal (best practices)

2011-02-22 Thread Thomas Bellman
James A. Peltier wrote: This is not necessarily true. If you configure the client to send a requested hostname it will not require you to register the MAC address, although, as per the usual this is a security risk since anyone on the network could pose as a machine if they knew that was the

[Puppet Users] When running puppetd the cert goes straight up to revoked?

2011-02-22 Thread Roberto Bouza
This is the first time is happening... and It happens consecutively with all the hosts. Fresh kickstarted host (never set up before the name so its not on the revocation list), I just run puppetd -tv (we have autosign on), I just get the output below: [root@server182 puppet]# puppetd -tv info:

[Puppet Users] Diff-style patches

2011-02-22 Thread Kent
Hi All, For most of the config files we manage via our Puppet setup, we either serve flat files or use templates and dashboard parameters and Facts to dynamically create the config file. However, in some cases we are not comfortable with either of these methods due to the possibility of small but

Re: [Puppet Users] provisioning bare metal (best practices)

2011-02-22 Thread Russell Jackson
On 02/22/2011 10:14 AM, James A. Peltier wrote: - Original Message - | I thought about DHCP for static addresses. I'd need the MAC for each | machine snip This is not necessarily true. If you configure the client to send a requested hostname it will not require you to register

Re: [Puppet Users] When running puppetd the cert goes straight up to revoked?

2011-02-22 Thread Denmat
Hi, Not sure on this but it looks like puppet is having issues reading /var/lib/puppet/lib Other things with SSL issues is to make sure your clocks are up to date, that you're using the right cert name if needed and DNS working correctly. Hope it helps. Den On 23/02/2011, at 6:53, Roberto

Re: [Puppet Users] Problem with module

2011-02-22 Thread Denmat
Hi The way I've got around this is to realize the user in the parent class or to create a 'user' class and put in a { class name: stage = pre} to guarantee it is created first. That's using stages in 2.6 though. Not sure what you're running. Den On 23/02/2011, at 2:42, Ashley Penney

Re: [Puppet Users] Problem with module

2011-02-22 Thread Ashley Penney
I am running 2.6 and can do this if needed. What would the parent class be in this example, the 'rhythmyx' class that the user{} entry is in? This is just included from foreman so I'm not sure there really is a parent as such. I have a user class for actual people that I could use if I had to.

[Puppet Users] auth.conf namespaceauth.conf : which files belong on the master , and client?

2011-02-22 Thread Jed
I'm trying to wrap my head around these files... do both of them need to reside on the client and master? are there any docs that describe these files and what all the option/ sections are and what they do? Thanks all -- You received this message because you are subscribed to the Google

[Puppet Users] Re: When running puppetd the cert goes straight up to revoked?

2011-02-22 Thread Roberto Bouza
I've removed /var/lib/puppet and /etc/puppet/ssl multiple times (removing the cert from the puppetmaster as well) with no luck. The times are in sync... Is really strange. On Feb 22, 12:27 pm, Denmat tu2bg...@gmail.com wrote: Hi, Not sure on this but it looks like puppet is having issues

Re: [Puppet Users] auth.conf namespaceauth.conf : which files belong on the master , and client?

2011-02-22 Thread Denmat
I think only on master. This might help you further. http://docs.puppetlabs.com/guides/security.html On 23/02/2011, at 8:29, Jed jedbl...@gmail.com wrote: I'm trying to wrap my head around these files... do both of them need to reside on the client and master? are there any docs that

Re: [Puppet Users] Re: When running puppetd the cert goes straight up to revoked?

2011-02-22 Thread Denmat
Are client and master at same version? What version are you using? On 23/02/2011, at 8:40, Roberto Bouza bouz...@gmail.com wrote: I've removed /var/lib/puppet and /etc/puppet/ssl multiple times (removing the cert from the puppetmaster as well) with no luck. The times are in sync... Is

[Puppet Users] Re: Diff-style patches

2011-02-22 Thread Ken Barber
You can use a file resource to copy a diff to a temp/diff area that notifies an exec that does the diff as you have mentioned. This means the diff would only get downloaded once, and the patch only applied if the diff changes. So roughly: file {/var/lib/diffpatches/foo.patch: source =

Re: [Puppet Users] Problem with module

2011-02-22 Thread Stefan Schulte
On Tue, Feb 22, 2011 at 10:42:34AM -0500, Ashley Penney wrote: Hi, I'm having a problem with a module that works on my production servers, but is giving me grief when ran from scratch. When I run the client I get: [root@hlsdevcms1 puppet]# puppetd -tv info: Retrieving plugin info:

[Puppet Users] Puppet 2.6 and extlookup... and environments

2011-02-22 Thread Douglas Garstang
I just incorporated environments into my puppet... On the server... [main] ... [pax] manifest = /etc/puppet/env/pax_prod/manifests/site.pp modulepath = /etc/puppet/env/pax_prod/modules [fre] manifest = /etc/puppet/env/fre_prod/manifests/site.pp modulepath =

[Puppet Users] Re: auth.conf namespaceauth.conf : which files belong on the master , and client?

2011-02-22 Thread Jed
Thanks Denmat... I've seen the page already, but its so vague... it doesnt mention anywhere what files belong where... I gather auth.conf would need to be on the puppetmaster... however, from what it says about namespaceauth.conf, it seems that needs to live on the puppet client machines

[Puppet Users] Re: When running puppetd the cert goes straight up to revoked?

2011-02-22 Thread Roberto Bouza
Yep Same version 2.6.4 It looks like the client crl.pem was causing this somehow. I just emptied the file and it looks like its working fine. Thx On Feb 22, 2:01 pm, Denmat tu2bg...@gmail.com wrote: Are client and master at same version? What version are you using? On 23/02/2011, at 8:40,

Re: [Puppet Users] Re: auth.conf namespaceauth.conf : which files belong on the master , and client?

2011-02-22 Thread Douglas Garstang
On Tue, Feb 22, 2011 at 2:58 PM, Jed jedbl...@gmail.com wrote: Thanks Denmat... I've seen the page already, but its so vague... it doesnt mention anywhere what files belong where... I gather auth.conf would need to be on the puppetmaster... however, from what it says about

Re: Re: [Puppet Users] Re: auth.conf namespaceauth.conf : which files belong on the master , and c

2011-02-22 Thread tu2Bgone
From the docs: auth.conf rest_authconfig = $confdir/auth.conf The auth.conf doesn't exist by default, but Puppet has some default settings that will be put in place if you don't create an auth.conf. You'll see these settings if you run your puppetmaster in debug

[Puppet Users] Puppet module to regularly change passwords and update SecretServer

2011-02-22 Thread Steve Shipway
I've created a Puppet module which will check a specified user for password age, and if it is older than a specified amount, then it will first generate a random password, change the user's password to this, and will then update (or create) the stored password as held in the Secret Server

[Puppet Users] RHEL5 and RHEL6 wiith Puppet

2011-02-22 Thread Steve Shipway
I've just started to test existing Puppet modules with RHEL6. It seems that several things have changed slightly, breaking the old RHEL5-tested modules and requiring addition configuration to be added. 1. The syslod has changed to rsyslog, and the config files have altered. This is the

[Puppet Users] File updates dumped to Messages File

2011-02-22 Thread Douglas Garstang
Here's a weird one. I have a 2.6 server and a 0.24.8 client, and when I run the puppet client, any files that are being updated by puppet, are having their entire contents dumped to /var/log/messages. What's up with that? Doug -- You received this message because you are subscribed to the

[Puppet Users] Re: auth.conf namespaceauth.conf : which files belong on the master , and c

2011-02-22 Thread Jed
ok so I did sometesting.. apparently, this is how it breaks down so far... -PUPPET CLIENT- namespaceauth.conf: you need this or else it dies on startup auth.conf : you do not need this normally, however if you want to do a 'puppetrun' from the master-client, this files needs to be present and

Re: [Puppet Users] Re: auth.conf namespaceauth.conf : which files belong on the master , and c

2011-02-22 Thread Douglas Garstang
On Tue, Feb 22, 2011 at 5:09 PM, Jed jedbl...@gmail.com wrote: ok so I did sometesting.. apparently, this is how it breaks down so far... -PUPPET CLIENT- namespaceauth.conf: you need this or else it dies on startup auth.conf : you do not need this normally, however if you want to do a

[Puppet Users] Re: Could not request certificate: undefined method `closed?' for nil:NilClass'

2011-02-22 Thread 暁華 管
Thank you, Felix. I will try. On 2月22日, 午前12:49, Felix Frank felix.fr...@alumni.tu-berlin.de wrote: On 02/21/2011 05:39 AM, 暁華 管 wrote: Hi, I installed puppet 0.25.4 on ubuntu 10.04. It was ok until puppet client and server were intalled. But when I tried to execute the following

[Puppet Users] Quick note: Moved the language tutorial.

2011-02-22 Thread Nick Fagerlund
Hi, all; docs guy here. On account of the language tutorial not... actually... being a tutorial, I've moved it to http://docs.puppetlabs.com/guides/language_guide.html. There's a 302 in place, but since it's probably one of the more used pages, I thought it'd be worth a quick mention anyway. (And

Re: [Puppet Users] File updates dumped to Messages File

2011-02-22 Thread Jeff McCune
On Tue, Feb 22, 2011 at 7:29 PM, Douglas Garstang doug.garst...@gmail.com wrote: Here's a weird one. I have a 2.6 server and a 0.24.8 client, and when I run the puppet client, any files that are being updated by puppet, are having their entire contents dumped to /var/log/messages. What's up

Re: [Puppet Users] Puppet module to regularly change passwords and update SecretServer

2011-02-22 Thread Dave Augustus
Very interested! I am in the midst of rolling out a brand new collection of servers, all Linux. This couldn't be more timely. Thanks, Dave Augustus On Feb 22, 2011, at 6:20 PM, Steve Shipway st...@steveshipway.org wrote: I've created a Puppet module which will check a specified user for

[Puppet Users] Re: auth.conf namespaceauth.conf : which files belong on the master , and c

2011-02-22 Thread Jed
so even more wierdness I moved the auth.conf and the namespaceauth.conf files on the puppetmaster, restarted the puppetmaster daemon in debug mode.and... no error...not a single one -- puppetclients connect just fine, and puppetrun works correctly... I must be missing something here

Re: [Puppet Users] File updates dumped to Messages File

2011-02-22 Thread Patrick
On Feb 22, 2011, at 4:29 PM, Douglas Garstang wrote: Here's a weird one. I have a 2.6 server and a 0.24.8 client, and when I run the puppet client, any files that are being updated by puppet, are having their entire contents dumped to /var/log/messages. What's up with that? Doug You