[Puppet Users] Another iptables question

2009-05-12 Thread LenR
I changed a ipt_fragment to ensure absent, puppet removed the rule, but didn't run rebuild-iptables. Does the define below need a notify on the absent side of the case? Is that valid? What about the ensure on the /etc/sysconfig/iptables.d file (further below), when is it triggered? Thanks again

[Puppet Users] Re: sin tax.... iptables

2009-05-12 Thread LenR
Thanks... pretty close for a new puppeteer On May 12, 11:41 am, Peter Meier wrote: > >   ipt_fragment {"iptables.000-header"} > >   ipt_fragment {"iptables.100-self"} > >    ipt_fragment {"iptables.000-header": } >    ipt_fragment {"iptables.100-self": } > > or > >    ipt_fragment { [ "ipta

[Puppet Users] sin tax.... iptables

2009-05-12 Thread LenR
I'm trying to setup iptables management, but I'm getting the syntax error below. I don't see how the recipe used ipt_fragment, so this is what I tried. The error seems to say it found what it expected :-) Thanks Could not parse for environment production: Syntax error at '}'; expected '}' at /

[Puppet Users] Pitching puppet - how does it work question

2009-05-06 Thread LenR
I'm trying to pitch puppet to my group. I have a test server & 2 clients, things are going pretty well. The question relates to user password management as outlined in the recipies. My question, if only the hash value changes, will puppet apply that change? Who notices the change, the client o