puppet 遇到的问题:
1、证书问题:
# puppetd –server puppet.test.com –test
warning: Certificate validation failed; considering using the certname configuration option
err: Could not retrieve catalog: Certificates were not trusted: hostname not match with the server certificate
warning: Not using cache on failed catalog
原因是:服务器端的/etc/puppet/puppet.conf中:
[puppetmasterd]
certname=puppet.test.com
的certname和puppetd –server puppet.test.com –test中的–server跟的字符必须一样(见黑体字体部分),否则就报错。
重新生成ssl:
(1)、在server:
/usr/sbin/puppetca -c test-226
(2)、在client:
cd /var/lib/puppet/ && rm ssl -rfv && puppetd --server puppet.test.com --test
(3)、在server:
/usr/sbin/puppetca -s test-226
另外,我的puppet和ruby相关的版本:
puppet-server-0.24.5-1.el5 puppet-0.24.5-1.el5 ruby-irb-1.8.5-5.el5_4.8 ruby-1.8.5-5.el5_4.8 ruby-rdoc-1.8.5-5.el5_4.8 rubygems-1.2.0-2.el5 ruby-libs-1.8.5-5.el5_4.8