[Puppet Users] Master failover and cert names.

2011-07-30 Thread Douglas Garstang
Well, this is frustrating. Let's say I have two puppet masters, where one is active, and the other is a hot stand by. Obviously each is going to have a different FQDN. Everything will work fine when the client talks to the server that signed it's certificate. However, after a failover to the secon

Re: [Puppet Users] Master failover and cert names.

2011-07-30 Thread James Turnbull
Douglas Garstang wrote: > Well, this is frustrating. > > Let's say I have two puppet masters, where one is active, and the other > is a hot stand by. Obviously each is going to have a different FQDN. > Everything will work fine when the client talks to the server that > signed it's certificate. Ho

Re: [Puppet Users] Master failover and cert names.

2011-07-31 Thread Peter Meier
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > I know that there's a 'certname' option but it looks like it's only valid in > the [agent], not the master section. How do I do this? It works in the master section as well. ~pete -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) Com

Re: [Puppet Users] Master failover and cert names.

2011-07-31 Thread Douglas Garstang
On Sat, Jul 30, 2011 at 10:38 PM, James Turnbull wrote: > Douglas Garstang wrote: > > Well, this is frustrating. > > > > Let's say I have two puppet masters, where one is active, and the other > > is a hot stand by. Obviously each is going to have a different FQDN. > > Everything will work fine wh