PuppetDB is operating fine, but I can't figure out how to disable it from listening globally on TCP 1099 or 58722
How do I disable them from listening globally without having to resort to iptables? $ lsof -i -n -P | grep java | grep LISTEN java 30115 puppetdb 22u IPv6 119118 0t0 TCP *:1099 (LISTEN) java 30115 puppetdb 23u IPv6 117236 0t0 TCP *:58772 (LISTEN) java 30115 puppetdb 40u IPv6 117241 0t0 TCP 127.0.0.1:8080 (LISTEN) java 30115 puppetdb 45u IPv6 117247 0t0 TCP 127.0.0.1:8081 (LISTEN) $ netstat -tnlp | grep java tcp6 0 0 :::1099 :::* LISTEN 30115/java tcp6 0 0 127.0.0.1:8080 :::* LISTEN 30115/java tcp6 0 0 127.0.0.1:8081 :::* LISTEN 30115/java tcp6 0 0 :::58772 :::* LISTEN 30115/java This is what NMAP says they are: PORT STATE SERVICE VERSION 1099/tcp open jrmi Java RMI 58772/tcp open unknown Java RMI: http://en.wikipedia.org/wiki/Java_remote_method_invocation My relevant configurations: $ egrep '(port|host|1099|58772)' /etc/puppetdb/conf.d/* /etc/puppetdb/conf.d/database.ini:# For PostgreSQL: //host:port/databaseName /etc/puppetdb/conf.d/database.ini:subname = //localhost:5432/puppetdb /etc/puppetdb/conf.d/jetty.ini:# Hostname to list for clear-text HTTP. Default is localhost /etc/puppetdb/conf.d/jetty.ini:host = localhost /etc/puppetdb/conf.d/jetty.ini:port = 8080 /etc/puppetdb/conf.d/jetty.ini:ssl-host = localhost /etc/puppetdb/conf.d/jetty.ini:ssl-port = 8081 /etc/puppetdb/conf.d/repl.ini:# What port the REPL should listen on /etc/puppetdb/conf.d/repl.ini:port = 8082 OS: Ubuntu 12.04 LTS x86_64 Puppetdb 1.0.5 Puppet 3.0.1 Is there a setting I've missed? Thanks in advance. Respectfully, Michael Henry (Mike) -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To view this discussion on the web visit https://groups.google.com/d/msg/puppet-users/-/VC9-avQhW2IJ. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
