kyawai
unread,Nov 6, 2009, 4:20:53 AM11/6/09Sign in to reply to author
Sign in to forward
You do not have permission to delete messages in this group
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Puppet Users
Hello.
Puppet-0.25.1 is used and the server and the client (both CentOS5.3)
are used.
The host's management uses openldap-2.4.16.
The problem of happening,
1. The manifest is applied when starting without putting the option of
--listen and --no-client on puppetd.
2. When it starts putting the option of --listen and --no-client on
puppetd, and puppetrun is used, the manifest is not applied.
As for this, is the usage of puppetrun wrong?
Or, is it a bug?
After that, when host is managed with openldap, cannot --host and --
tag be used with puppetrun?
1. The manifest is applied without trouble.
server side
# puppetmasterd --no-daemonize --debug --trace
==cut==
info: access[^/catalog/([^/]+)$]: allowing 'method' find
info: access[^/catalog/([^/]+)$]: allowing $1 access
info: access[/certificate_revocation_list/ca]: allowing 'method' find
info: access[/certificate_revocation_list/ca]: allowing * access
info: access[/report]: allowing 'method' save
info: access[/report]: allowing * access
info: access[/file]: allowing * access
info: access[/certificate/ca]: adding authentication no
info: access[/certificate/ca]: allowing 'method' find
info: access[/certificate/ca]: allowing * access
info: access[/certificate/]: adding authentication no
info: access[/certificate/]: allowing 'method' find
info: access[/certificate/]: allowing * access
info: access[/certificate_request]: adding authentication no
info: access[/certificate_request]: allowing 'method' find
info: access[/certificate_request]: allowing 'method' save
info: access[/certificate_request]: allowing * access
info: access[/]: adding authentication any
info: Expiring the node cache of client1.devel.local
info: Not using expired node for client1.devel.local from cache;
expired at Fri Nov 06 17:04:02 +0900 2009
info: Caching node for client1.devel.local
debug: importing '/etc/puppet/manifests/bw_base/hosts.pp'
notice: Compiled catalog for client1.devel.local in 0.06 seconds
info: mount[data]: allowing * access
info: Applying configuration version '1257496453'
debug: Format s not supported for Puppet::FileServing::Metadata; has
not implemented method 'from_s'
debug: Format pson not supported for Puppet::FileServing::Metadata;
has not implemented method 'from_pson'
debug: //hosts/File[hosts]: Changing checksum,content
debug: //hosts/File[hosts]: 2 change(s)
debug: //hosts/File[hosts]/checksum: Replacing hosts checksum {md5}
58911d77753f5c97ec5b38369dcfe867 with {md5}
10b33fd261774c1db52033caed0c292a
notice: //hosts/File[hosts]/checksum: checksum changed '{md5}
58911d77753f5c97ec5b38369dcfe867' to '{md5}
10b33fd261774c1db52033caed0c292a'
debug: Finishing transaction 23457619478560 with 0 changes
info: Filebucket[/var/lib/puppet/clientbucket]: Adding /etc/hosts
(10b33fd261774c1db52033caed0c292a)
info: //hosts/File[hosts]: Filebucketed /etc/hosts to puppet with sum
10b33fd261774c1db52033caed0c292a
debug: //hosts/File[hosts]/checksum: Replacing hosts checksum {md5}
10b33fd261774c1db52033caed0c292a with {md5}
58911d77753f5c97ec5b38369dcfe867
debug: Format s not supported for Puppet::FileServing::Metadata; has
not implemented method 'from_s'
debug: Format pson not supported for Puppet::FileServing::Metadata;
has not implemented method 'from_pson'
notice: //hosts/File[hosts]/content: content changed '{md5}
10b33fd261774c1db52033caed0c292a' to '{md5}
58911d77753f5c97ec5b38369dcfe867'
client side
# puppetd --no-daemonize --debug --trace --verbose
==cut==
debug: Format s not supported for Puppet::Resource::Catalog; has not
implemented method 'from_s'
info: Caching catalog for client1.devel.local
debug: Loaded state in 0.00 seconds
info: Applying configuration version '1257496453'
debug: Format s not supported for Puppet::FileServing::Metadata; has
not implemented method 'from_s'
debug: Format pson not supported for Puppet::FileServing::Metadata;
has not implemented method 'from_pson'
debug: //hosts/File[hosts]: Changing checksum,content
debug: //hosts/File[hosts]: 2 change(s)
debug: //hosts/File[hosts]/checksum: Replacing hosts checksum {md5}
58911d77753f5c97ec5b38369dcfe867 with {md5}
bba2e6f9b62bf7b4c894087fa6e35c6d
notice: //hosts/File[hosts]/checksum: checksum changed '{md5}
58911d77753f5c97ec5b38369dcfe867' to '{md5}
bba2e6f9b62bf7b4c894087fa6e35c6d'
debug: Finishing transaction 23770684719120 with 0 changes
info: Filebucket[/var/lib/puppet/clientbucket]: Adding /etc/hosts
(bba2e6f9b62bf7b4c894087fa6e35c6d)
info: //hosts/File[hosts]: Filebucketed /etc/hosts to puppet with sum
bba2e6f9b62bf7b4c894087fa6e35c6d
debug: //hosts/File[hosts]/checksum: Replacing hosts checksum {md5}
bba2e6f9b62bf7b4c894087fa6e35c6d with {md5}
58911d77753f5c97ec5b38369dcfe867
debug: Format s not supported for Puppet::FileServing::Metadata; has
not implemented method 'from_s'
debug: Format pson not supported for Puppet::FileServing::Metadata;
has not implemented method 'from_pson'
notice: //hosts/File[hosts]/content: content changed '{md5}
bba2e6f9b62bf7b4c894087fa6e35c6d' to '{md5}
58911d77753f5c97ec5b38369dcfe867'
debug: Finishing transaction 23770684861020 with 2 changes
debug: Storing state
debug: Stored state in 0.01 seconds
debug: Format s not supported for Puppet::Transaction::Report; has not
implemented method 'from_s'
debug: Format pson not supported for Puppet::Transaction::Report; has
not implemented method 'from_pson'
notice: Finished catalog run in 0.62 seconds
debug: Using cached certificate for ca
debug: Using cached certificate for client1.devel.local
debug: Using cached certificate for ca
debug: Using cached certificate_revocation_list for ca
2. When puppetrun is used, the manifest is not applied.
client side
# puppetd --no-daemonize --debug --trace --verbose --no-client --
listen
==cut==
server side
# puppetrun -c hosts
Triggering client1.devel.local
client1.devel.local finished with exit code 0
Finished
client side
info: access[[puppetrunner]]: allowing server1.devel.local access
debug: Allowing authenticated client server1.devel.local
(172.25.194.61) access to puppetrunner.run
notice: triggered run
debug: Loaded state in 0.00 seconds
debug: Format s not supported for Puppet::Resource::Catalog; has not
implemented method 'from_s'
info: Caching catalog for client1.devel.local
debug: Loaded state in 0.00 seconds
info: Applying configuration version '1257496453'
debug: //hosts/File[hosts]: Not tagged with
debug: Finishing transaction 23845286788320 with 0 changes
debug: Storing state
debug: Stored state in 0.01 seconds
debug: Format s not supported for Puppet::Transaction::Report; has not
implemented method 'from_s'
debug: Format pson not supported for Puppet::Transaction::Report; has
not implemented method 'from_pson'
notice: Finished catalog run in 0.16 seconds
server side
info: access[^/catalog/([^/]+)$]: allowing 'method' find
info: access[^/catalog/([^/]+)$]: allowing $1 access
info: access[/certificate_revocation_list/ca]: allowing 'method' find
info: access[/certificate_revocation_list/ca]: allowing * access
info: access[/report]: allowing 'method' save
info: access[/report]: allowing * access
info: access[/file]: allowing * access
info: access[/certificate/ca]: adding authentication no
info: access[/certificate/ca]: allowing 'method' find
info: access[/certificate/ca]: allowing * access
info: access[/certificate/]: adding authentication no
info: access[/certificate/]: allowing 'method' find
info: access[/certificate/]: allowing * access
info: access[/certificate_request]: adding authentication no
info: access[/certificate_request]: allowing 'method' find
info: access[/certificate_request]: allowing 'method' save
info: access[/certificate_request]: allowing * access
info: access[/]: adding authentication any
info: Expiring the node cache of client1.devel.local
info: Not using expired node for client1.devel.local from cache;
expired at Fri Nov 06 17:07:37 +0900 2009
info: Caching node for client1.devel.local
debug: importing '/etc/puppet/manifests/bw_base/hosts.pp'
notice: Compiled catalog for client1.devel.local in 0.08 seconds
info: Applying configuration version '1257496453'
debug: //hosts/File[hosts]: Not tagged with
server side
/etc/puppet/puppet.conf
[main]
vardir = /var/lib/puppet
logdir = /var/log/puppet
rundir = /var/run/puppet
ssldir = $vardir/ssl
node_terminus = ldap
ldapserver = localhost
ldapbase = ou=Hosts,dc=devel,dc=local
----
/etc/puppet/manifests/site.pp
import 'bw_base/hosts.pp'
$fileserver = 'server1.devel.local'
----
/etc/puppet/manifests/bw_base/hosts.pp
class hosts {
file {
'hosts':
path => '/etc/hosts',
source => "puppet://$fileserver/data/bw_base/etc/hosts",
owner => 'root',
group => 'root',
mode => 644;
}
}
----
Auth.conf uses that it is in tar.gz.
----
client side
/etc/puppet/puppet.conf
[main]
vardir = /var/lib/puppet
logdir = /var/log/puppet
rundir = /var/run/puppet
ssldir = $vardir/ssl
[puppetd]
server = server1.devel.local
report = true
ignorecache = true
----
/etc/puppet/namespaceauth.conf
[puppetrunner]
allow server1.devel.local
----
Host information on openldap
dn: cn=client1.devel.local,ou=Hosts,dc=devel,dc=local
objectClass: top
objectClass: ipHost
objectClass: device
objectClass: puppetClient
cn: client1.devel.local
ipHostNumber: 172.25.192.220
puppetclass: hosts
// kyawai