Re: [Puppet Users] puppetlabs-firewall scope

2013-12-02 Thread Louis Coilliot
Hello, sorry I'm not sure because I'm now used to do a iptables -F just in case before applying puppet on a new node for the first time. This is now in my standard provisioning procedure. After that my fw rules are handled with puppet and I don't have any more problems. I think I use some very

Re: [Puppet Users] Puppet agent does not start in Solaris zone

2013-12-02 Thread Andreas Dvorak
Dear all, I found the problem. The package needs to be installed in the global zone. It does not work if you install it only in the local zone. Best regards Andreas -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this grou

[Puppet Users] Re: Providing hiera with module data

2013-12-02 Thread Steven Jonthen
I only need to know how to use different "hiera.yaml" files for different modules. How can I achieve that`? -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to pupp

Re: [Puppet Users] Nsclient install

2013-12-02 Thread Jeffrey Smith
HI Josh It seems the display name was wrong. service { 'nsclient': name=> 'NSClientpp', ensure => running, enable => true, require => Package['nsclient'], } That now works. Thanks for the help. On Sunday, December 1, 2013 9:37:58

Re: [Puppet Users] Problem with PuppetDB and OpenSSL (solved)

2013-12-02 Thread Ken Barber
So this seems to be a regression in openssl-1.0.1e-15.el6.x86_64. The reason why this works for JDK 7, is because we've had issues with the ECC based ciphers in the past, and had to pin JDK 7 to non-ECC ciphers. However we had the anticipation that this might be something that would come back, so

Re: [Puppet Users] puppet open source and vmware template

2013-12-02 Thread kaustubh chaudhari
Thanks Neil, Ur answer did make my concepts clear!!! Thanks again!! -Kaustubh On Friday, November 29, 2013 8:59:59 AM UTC-5, Neil - Puppet List wrote: > > When you deploy a vm from the template give it a host name. Then first > puppet run will make a new cert. Set puppet master to autosign an

Re: [Puppet Users] Dynamic hiera.yaml

2013-12-02 Thread Dan White
You have to "turn it on" >From >https://github.com/puppetlabs/armatures/blob/master/arm-9.data_in_modules/index.md > (Examples) NOTE: In order to activate the "data-in-modules" and "Hiera-2" it is required to: • Use one of these settings (in puppet's config or made from the

Re: [Puppet Users] puppet open source and vmware template

2013-12-02 Thread Felix Frank
Please keep in mind that autosign is a very dangerous setting security-wise. Make sure you are aware of all implications. Secure your master. Check to see if there is a more robust solution for you. Regards, Felix On 12/02/2013 01:35 PM, kaustubh chaudhari wrote: > Thanks Neil, > > Ur answer did

Re: [Puppet Users] Re: Providing hiera with module data

2013-12-02 Thread Dan White
What have you tried ? Links to all the available documentation have already been provided. I have not tried using "Data In Modules", so I cannot do more than make educated guesses and intelligent suggestions based on the available information. Have you tried directly contacting the people th

Re: [Puppet Users] Multiple server roles using hiera and facts

2013-12-02 Thread Matthias Saou
On Sun, 1 Dec 2013 20:58:34 -0800 (PST) Shiva Narayanaswamy wrote: > I want to implement a scenario where I can mix and match multiple > roles on any managed node. The particular roles played by a node are > available as facts (role1=webserver, role2=appserver etc )In > development all the roles

Re: [Puppet Users] Re: Puppet Agent does not connect to master after installing Dashboard

2013-12-02 Thread shlo . afgin
Thanks, I test it today and now both work. On Thursday, November 28, 2013 10:42:54 AM UTC+2, Felix.Frank wrote: > > Hi, > > actually, I believe both puppetmaster and dashboard use passenger. > > The idea behind apache's virtual hosts is that you can have independent > sets of configuration

Re: [Puppet Users] puppet open source and vmware template

2013-12-02 Thread kaustubh chaudhari
Hey Felix, Yep, i understand! autosign is not good for my infrastructure! Thanks for sharing!! -Kaustubh With Warm Regards Kaustubh.A.Chaudhari (M)-09373102619 On Mon, Dec 2, 2013 at 8:13 AM, Felix Frank wrote: > Please keep in mind that autosign is a very dangerous setting > security-wise.

Re: [Puppet Users] Re: Puppet Agent does not connect to master after installing Dashboard

2013-12-02 Thread shlo . afgin
I continue with the instruction of configure Dashboard. First, I dont see a list of nodes I have, Do I need to add them manually to Dashboard or it should came up automatically? I tried to set "Importing exiting reports" : I dont have /var/puppet/lib/reports, how can I know where my report exist

Re: [Puppet Users] Re: Puppet Agent does not connect to master after installing Dashboard

2013-12-02 Thread kaustubh chaudhari
what are you [master] setting in puppet.conf what is the 'report = ' configured for ? -Kaustubh On Monday, December 2, 2013 9:46:49 AM UTC-5, shlo@gmail.com wrote: > > I continue with the instruction of configure Dashboard. > First, I dont see a list of nodes I have, Do I need to add them ma

[Puppet Users] Class parameter flexibility with ENC, hiera or both

2013-12-02 Thread Pablo Fernandez
Dear puppetteers, I am having a philosophical question about parametrized classes. When building modules, one wants to be as flexible as possible, to try to target as many puppet flavors as possible. This is our target: - Foreman users, using foreman as an ENC with smart variables (or potentially

[Puppet Users] Re: validate hiera database against a schema

2013-12-02 Thread jcbollinger
On Friday, November 29, 2013 2:58:19 AM UTC-6, David Portabella wrote: > > is there a way to validate a hiera database against a schema? > Not that I know of, no. Did you have a particular schema language in mind? > the validation could be done as a whole (but that might not make sense, as

[Puppet Users] Re: Passing an entire directory from the puppet master.

2013-12-02 Thread jcbollinger
On Thursday, November 28, 2013 5:09:09 AM UTC-6, Waqar Khan wrote: > > Can someone help, im trying to send an entire directory with its contents > to the puppet agent. Here is the init.pp file: > > > class testing { > > file { "C:/test/": > > > ensure => directory, > owner => 'Administrator', >

Re: [Puppet Users] Re: validate hiera database against a schema

2013-12-02 Thread Nan Liu
On Mon, Dec 2, 2013 at 9:44 AM, jcbollinger wrote: > > > On Friday, November 29, 2013 2:58:19 AM UTC-6, David Portabella wrote: >> >> is there a way to validate a hiera database against a schema? >> > > > Not that I know of, no. Did you have a particular schema language in mind? > Ken Barber don

Re: [Puppet Users] Multiple server roles using hiera and facts

2013-12-02 Thread Chris Handy
i have heard of people using json in fact values to express arrays. On Monday, December 2, 2013 8:25:20 AM UTC-5, Matthias Saou wrote: > > On Sun, 1 Dec 2013 20:58:34 -0800 (PST) > Shiva Narayanaswamy > wrote: > > > I want to implement a scenario where I can mix and match multiple > > roles o

Re: [Puppet Users] matching all current "ipaddress_ethX" facts

2013-12-02 Thread jcbollinger
On Friday, November 29, 2013 5:46:11 AM UTC-6, cko wrote: > > Thanks, i think i got something here: > > Facter.add("ip_prodlan") do >confine :kernel => "Linux" >setcode do > Facter::Util::Resolution.exec("/sbin/ifconfig | /bin/grep > '20.20.\\|30.31.\\|200.30.80.\\|120.' | /bin/awk

Re: [Puppet Users] Re: [windows server 2008 r2] puppet errors in 3.3.0 on exchange database servers

2013-12-02 Thread Arvind P R
Hello, I am a new user. My pupet is running on CentOS and I am facing the same issue on my windows 2012 box. Can you please tell me where I should be running this? on the puppetmaster server or agent? I didnt make the changes to the windows.rb file but I still face the same issue. [root@puppe

Re: [Puppet Users] Multiple server roles using hiera and facts

2013-12-02 Thread Shiva Narayanaswamy
I think I kind of get what you are saying, and I was going to do some ugly if loops in my modules, but that was the second option. I was wondering if there is a more elegant solution. Thanks for taking the time to answer. On Tuesday, December 3, 2013 12:25:20 AM UTC+11, Matthias Saou wrote: >

[Puppet Users] cli-driven list-file-based ad-hoc runs

2013-12-02 Thread Stuart Cracraft
Currently, I have /etc/puppet/puppet.conf on my nodes with [main] : noop = true [agent] : And puppet is running as: /usr/bin/ruby /usr/bin/puppet agent --verbose On the Puppet Master: /etc/puppet/manifests/nodes.pp node 'basenode' { include baseclass } : node 'somep

Re: [Puppet Users] Re: [windows server 2008 r2] puppet errors in 3.3.0 on exchange database servers

2013-12-02 Thread Rob Reynolds
On Mon, Dec 2, 2013 at 12:31 PM, Arvind P R wrote: > Hello, > > I am a new user. > My pupet is running on CentOS and I am facing the same issue on my windows > 2012 box. > Can you please tell me where I should be running this? > > on the puppetmaster server or agent? > > I didnt make the changes

Re: [Puppet Users] Re: [windows server 2008 r2] puppet errors in 3.3.0 on exchange database servers

2013-12-02 Thread Arvind P R
Thanks for your prompt answer. I ran this on the windows (Hyper-V) node which is running MSCS cluster. Microsoft Windows [Version 6.3.9600] (c) 2013 Microsoft Corporation. All rights reserved. C:\Users\administrator.A1000>facter --trace --debug ←[0;32mNot an EC2 host←[0m C:/Program Files (x86)/P

Re: [Puppet Users] Re: [windows server 2008 r2] puppet errors in 3.3.0 on exchange database servers

2013-12-02 Thread Rob Reynolds
This change would need to get applied to the node (the agent box). Apologies I missed where you said you made the change to the puppet master and not the node. Most likely that will be at C:\Program Files (x86)\Puppet Labs\Puppet\facter\lib\facter\util\ip\windows.rb (your path may be slightly diff

[Puppet Users] Tracking Bug #21869, Subject is: Error: Could not request certificate:stack level too deep", does not explain the workaround clearly.

2013-12-02 Thread Ronald Frye
I'm setting up Puppet with externally supported x.509 certificates from a single CA and I'm encountering this error. The workaround states to copy the CA's public key from the master to node, however this situation is the node agent on the actual puppet master server. The CA or issuer of the b

Re: [Puppet Users] Purging of ssh_authorized_keys

2013-12-02 Thread Felix Frank
On 11/22/2013 03:28 PM, jcbollinger wrote: > ssh_authorized_key { 'example': > target => '/non/standard/location' > key => '...', > type => 'rsa', > ensure => 'present', > } > > resources { 'purge_authorized_keys': > name => 'ssh_authorized_key', > purge => true > } > > Suppose furthe

Re: [Puppet Users] Re: noop = true and what for test?

2013-12-02 Thread Rich Burroughs
Hi Stuart, I'm not sure what your use case is for running the agent as a daemon in noop mode? I can't think of a situation at least in my workplace when I'd want to do that. You know that you can run the agent once in noop mode from the command line? You can do that without changing any configs r

Re: [Puppet Users] best way to distribute puppet manifests

2013-12-02 Thread Rich Burroughs
I think it depends a bit on your situation. If you're the only one editing the code, you might find using a version control system too much overhead. I would probably still want to do it even in that case, but not everyone would. If you're making changes infrequently, a backup of the files might be

[Puppet Users] testing and exported (nagios) resources

2013-12-02 Thread Jason Antman
Hello, I have 3 puppet stacks (master, puppetdb, enc) - dev, test/qa and prod. Dev is used for initial development and testing of code (including puppet), which is then promoted to test and then prod. I'd like to start using the nagios types to configure monitoring, via exported resources (yes I'

Re: [Puppet Users] matching all current "ipaddress_ethX" facts

2013-12-02 Thread Jacob Fleming-Gale
the has_ip_network function that's part of puppet-stdlib may help, it matches all interfaces against a network address and return a boolean if a match is found. https://github.com/puppetlabs/puppetlabs-stdlib#has_ip_network On 3 December 2013 04:18, jcbollinger wrote: > > > On Friday, November

[Puppet Users] Re: external facts cause puppet apply to take inordinately longer to run

2013-12-02 Thread Glenn Poston
Any ideas anyone? [vagrant@fisheye-10-0-2-15 ~]$ facter --version 1.7.3 [vagrant@fisheye-10-0-2-15 ~]$ puppet --version 3.3.2 On Thursday, November 28, 2013 12:17:44 AM UTC-5, Glenn Poston wrote: > > My external fact script takes 5s to run. > > With external fact... > puppet takes 2.5m to run > f

Re: [Puppet Users] Re: [windows server 2008 r2] puppet errors in 3.3.0 on exchange database servers

2013-12-02 Thread Arvind P R
That worked. Thank you :) On Tuesday, December 3, 2013 1:57:52 AM UTC+5:30, Rob Reynolds wrote: > > This change would need to get applied to the node (the agent box). > Apologies I missed where you said you made the change to the puppet master > and not the node. > > Most likely that will be at

[Puppet Users] Local group member management module posted to the forge.

2013-12-02 Thread Trevor Vaughan
Puppet Users, This is just a note that I've published a module to the forge that allows for the management of local group membership on Linux systems. No modifications are needed for your calls to the native group type, you simply need to add an array of members as per the type documentation. ht

Re: [Puppet Users] Re: Puppet Agent does not connect to master after installing Dashboard

2013-12-02 Thread shlo . afgin
under [master] tag I have: reports = store, http reporturl = http://puppetsrv:80/reports On Monday, December 2, 2013 7:18:40 PM UTC+2, kaustubh chaudhari wrote: > > what are you [master] setting in puppet.conf what is the 'report = ' > configured for ? > > -Kaustubh > > On Monday, Decembe

Re: [Puppet Users] Re: Puppet Agent does not connect to master after installing Dashboard

2013-12-02 Thread kaustubh chaudhari
I guess its http//pupetsrv/reports/uploads == http://docs.puppetlabs.com/dashboard/manual/1.2/bootstrapping.html#using-dashboard-for-reports == Also if you are using http, you dont need to specify port 80, one more thing, have you configured all your agent to report ? report = true -Kaustubh