Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I installed puppet 2.6.12 on CentOS 6. When I try to start the puppetmaster service using the command service puppetmaster start I get the error:

Starting puppetmaster: /usr/lib/ruby/site_ruby/1.8/puppet/indirector/ssl_file.rb:142:in open: Permission denied - /var/lib/puppet/ssl/ca (Errno::EACCES).

If I do sudo service puppetmaster start I get the error

 Starting puppetmaster: Could not prepare for execution: Could not find a default provider for user

I have ruby 1.8.7,ruby-libs and ruby-shadow installed. How can I fix this problem ?

share|improve this question
Do you have SELinux installed and active? – Jeremy Bouse Dec 20 '11 at 14:23
I had done a fresh install of CentOS6. Dont have any idea about SELinux. Is that the cause of the problem ? – Jim Dec 20 '11 at 16:35
Run getenforce to check the SELinux status on the box. I believe default is to enable it. – Jeremy Bouse Dec 20 '11 at 16:55
When i run the command getenforce it shows Enforcing. Does that mean its already enabled ?. – Jim Dec 20 '11 at 19:24

Try to disable SELinux or at least put it into Permissive mode and see if the issue resolves. To do this just edit the /etc/sysconfig/selinux file and change the value of SELINUX as directed in the file.

If this solves the problem then SELinux is interfering with Puppet's operation and you can either keep it disabled/permissive if having SELinux enabled is not required or would require determining why SELinux is having problems. This question related as to whether or not SELinux should be enabled or disabled.

share|improve this answer
Terrible advice. Simply to say 'disable selinux' does not solve anyone's problem. – Mike Purcell Dec 4 '12 at 1:18
Try re-reading the answer Mike as I wasn't simply saying to disable selinux but mark it to 'Permissive' which allows the actions to take place but logs the action as a means of troubleshooting to see if selinux is the cause for the failure. – Jeremy Bouse Dec 4 '12 at 12:49

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.