The Salt Master has cached the public key for this node, this salt minion will wait for 10 seconds before attempting to re-authenticate

[Zippy Zeppoli]

Hi List,
I am getting the following error message a lot in my minion logs:
2012-10-29 16:23:30,943 [salt.crypt       ][ERROR   ] The Salt Master has cached the public key for this node, this salt minion will wait for 10 seconds before attempting to re-authenticate


I am wondering what causes it and how to resolve it.

I tried salt-key -D to delete minions from the master, and then re-added it, but this didn't fix it.

Thanks in advance.

[Thomas S Hatch]

This happens only when the minion's key is waiting to be approved on the master. Is the minion key accepted in the salt-key -L output?

[Zippy Zeppoli]

Yes.

[Thomas S Hatch]

There must be something wonky in your setup, I have been unable to reproduce what you are experiencing

[Frederic Michaud]

I have the same error in my minion log file, try to restart the minion and acepte key but the error stay there

[Thomas S Hatch]

You need to accept the key on the master via the salt-key

 command

Thomas S. Hatch  |  Founder, CTO

5272 South College Drive, Suite 301 | Murray, UT 84123

tha...@saltstack.com | www.saltstack.com

--
You received this message because you are subscribed to the Google Groups "Salt-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to salt-users+...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

[郭威]

maybe you just change the ID name in /etc/salt/minion.

在 2012年10月30日星期二UTC+8上午7时30分27秒，Zippy Zeppoli写道：

[Florian Ermisch]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi,

For me it was sometimes more reliable to delete the file with the complaining minion's key (below /etc/salt/pki/ I think) than using `salt-key -d $MINION_IS`.

Regards,Florian

>--
>You received this message because you are subscribed to the Google
>Groups "Salt-users" group.
>To unsubscribe from this group and stop receiving emails from it, send
>an email to salt-users+...@googlegroups.com.

>For more options, visit https://groups.google.com/d/optout.
-----BEGIN PGP SIGNATURE-----
Version: APG v1.1.1

iQFTBAEBCgA9BQJUIZvrNhxGbG9yaWFuIEVybWlzY2ggPGZsb3JpYW4uZXJtaXNj
aEBhbHVtbmkudHUtYmVybGluLmRlPgAKCRAoI7w/vNtfZd4FB/9jgOLTc8pt9evX
JBPGrHodAuL5ymJD9bBzH3SHzoge9wctjwWsxCFLFMSposaYKysuPy8Q8a3VZuoY
OuZyoDKNmeggqj6aKrZ4hNxr/6650p0oXV9HZMsoUTsLgrRhA58Kv18BBKnoSu8O
dyNLByblfktzgY0FxJZTICZmK2/Wg7tHv2c9YfmnLRQfP6HpzqhL1JodcthtKZbn
mfnz7FfROmsAzYXhB5NMbbTWYt9rGSAbirdJmDI9vrEptbZ1+Z67UYeokS0vLlK2
xmHN6nOf1KATSWJKnLrNpcfYH/2FwFbQYHW5DtKMpW/nSjMdoxVna1NDgunih53s
7AxguU8q
=vW2t
-----END PGP SIGNATURE-----

[charles...@noaa.gov]

I think I found the problem after a fashion.  I'm not 100% sure what the issue is as I'm tracking it down, but I think the machine itself was screwy.  The key was accepted just fine, it just couldn't seem to connect to 4505.  Even with iptables off and everything open it refused to connect on 4505.  I tore down the machine and rebuilt it and everything is working fine now.

[Cole Phillips]

This might be happening because your master.pub key has changed on the master. You have to add in the new key. Run salt-key -F, to get the .pub key, and add it your minion config file. 

More info here.. https://docs.saltstack.com/en/latest/ref/configuration/index.html