Puppet with Passenger - 403 Forbidden errors???

2,359 views
Skip to first unread message

Gavin Williams

unread,
Feb 12, 2013, 4:22:41 PM2/12/13
to puppet...@googlegroups.com
Hi all

I'm trying to migrate our existing Puppet env from WeBrick to Passenger with Apache.

I followed the following tutorials http://wiki.unixcraft.com/display/MainPage/Puppet+3.0+Installation+on+Centos+6.3 & http://aricgardner.com/deployment/puppet-2/puppet-master-on-centos-5-7-with-passenger-and-foreman/
However whenever I try and communicate with the puppet master, I'm getting a 403 forbidden error.

ENC Classifier:
$ ./node.rb puppet-test.card.co.uk
Error retrieving node puppet-test.card.co.uk: Net::HTTPForbidden

Puppet Agent:
$ sudo puppet agent -t
Warning: Unable to fetch my node definition, but the agent run will continue:
Warning: Error 403 on SERVER: Forbidden request: puppet-os.card.co.uk(192.168.150.118) access to /node/puppet-os.card.co.uk [find] at :99
Info: Retrieving plugin
Error: /File[/var/lib/puppet/lib]: Failed to generate additional resources using 'eval_generate: Error 403 on SERVER: Forbidden request: puppet-os.card.co.uk(192.168.150.118) access to /file_metadata/plugins [search] at :99
Error: /File[/var/lib/puppet/lib]: Could not evaluate: Error 403 on SERVER: Forbidden request: puppet-os.card.co.uk(192.168.150.118) access to /file_metadata/plugins [find] at :99 Could not retrieve file metadata for puppet://puppet.card.co.uk/plugins: Error 403 on SERVER: Forbidden request: puppet-os.card.co.uk(192.168.150.118) access to /file_metadata/plugins [find] at :99
Info: Loading facts in /etc/puppet/modules/puppet/lib/facter/etckepper_puppet.rb
Info: Loading facts in /etc/puppet/modules/stdlib/lib/facter/puppet_vardir.rb
Info: Loading facts in /etc/puppet/modules/stdlib/lib/facter/root_home.rb
Info: Loading facts in /etc/puppet/modules/stdlib/lib/facter/facter_dot_d.rb
Info: Loading facts in /etc/puppet/modules/concat/lib/facter/concat_basedir.rb
Info: Loading facts in /etc/puppet/modules/act/lib/facter/oracle_sids.rb
Info: Loading facts in /etc/puppet/modules/act/lib/facter/smo_version.rb
Info: Loading facts in /etc/puppet/modules/firewall/lib/facter/iptables.rb
Info: Loading facts in /var/lib/puppet/lib/facter/oracle_sids.rb
Info: Loading facts in /var/lib/puppet/lib/facter/concat_basedir.rb
Info: Loading facts in /var/lib/puppet/lib/facter/puppet_vardir.rb
Info: Loading facts in /var/lib/puppet/lib/facter/iptables.rb
Info: Loading facts in /var/lib/puppet/lib/facter/root_home.rb
Info: Loading facts in /var/lib/puppet/lib/facter/facter_dot_d.rb
Info: Loading facts in /var/lib/puppet/lib/facter/smo_version.rb
Info: Loading facts in /var/lib/puppet/lib/facter/etckepper_puppet.rb
Error: Could not retrieve catalog from remote server: Error 403 on SERVER: Forbidden request: puppet-os.card.co.uk(192.168.150.118) access to /catalog/puppet-os.card.co.uk [find] at :99
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run
Error: Could not send report: Error 403 on SERVER: Forbidden request: puppet-os.card.co.uk(192.168.150.118) access to /report/puppet-os.card.co.uk [save] at :99

Any ideas on what could be the cause?

I've checked file permissions etc, and from what I can gather they are correct.

Cheers in advance for any responses.

Regards
Gavin

Felix Frank

unread,
Feb 14, 2013, 7:20:07 AM2/14/13
to puppet...@googlegroups.com
Hi,

what does apache commit to the error log when an agent tries to connect?

Thanks,
Felix

fatmcgav

unread,
Feb 14, 2013, 7:41:19 AM2/14/13
to puppet...@googlegroups.com
There was/is nothing in the error_log...

Cheers
Gav



--
You received this message because you are subscribed to the Google Groups "Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users...@googlegroups.com.
To post to this group, send email to puppet...@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.



Felix Frank

unread,
Feb 14, 2013, 7:46:00 AM2/14/13
to puppet...@googlegroups.com
Okay then, how about puppet's master log and masterhttpd log?

Jeethendra kumar

unread,
Sep 12, 2014, 8:02:59 AM9/12/14
to puppet...@googlegroups.com
Hi,

Check the CertName in the puppet.conf file. check for the case sensitive of the certname of the Agent in the file, it should be the same as appearing in the Puppet Master console,


Regards,
Jeeth
Reply all
Reply to author
Forward
0 new messages