Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is it possible that i can issue a command from master pupet, to a node, to run agent and apply the latest configuration to it?

Like,i have lost password for a user and i am not able to login, but puppet agent is installed on the server and i can apply the changes on the server by running the puppet agent, but as its not running automatically and i cannot login to run it manually, how to run it and apply configuration through the puppet master? (if possible)

share|improve this question
Similar to what Zoredache mentions below, if the agent isn't running, there's no way to force it to check back in. Puppet is a pull system, not a push one (the agent decides when to check in, not the master). To reduce the chance of this happening in the future, you could (a) set up ssh key exchange between the puppetmaster and the clients for root login, (b) create cron jobs to start puppet agent if it's not running. – Mike Renfro Mar 21 '13 at 21:50
what is the agent is demonized? is there any way to push the changes to it? – Farhan Mar 22 '13 at 16:06
If the agent is running on the client, you can do whatever you want by editing manifests on the puppetmaster and waiting on the agent to check in: install packages, copy ssh keys from the puppetmaster, rewrite configuration files, etc. If the agent is not running on the client, and you have no other working means of remote access as root, you will have to fix it physically with a rescue CD or some other method, which would be a different question. – Mike Renfro Mar 23 '13 at 1:34
have a look at this: Very basic, but still helpful – user2124712 Dec 1 '15 at 13:26


puppet kick --host <hostname>

share|improve this answer
Of course this assumes that his agent is daemonized. But since he mentions the agent is not running automatically, I suspect this will not help. – Zoredache Mar 21 '13 at 16:32
As I understood, puppet should be configured on the client, but not necessarily need to be daemonized. In addition the client needs to be configured to be able listen to port 8139 for tcp connections. Related note, I realized that puppet kick is deprecated, don't know if it has an improved method. – iamauser Mar 22 '13 at 15:01
had been trying all day, no success. it gives error : Triggering Host failed: Connection refused - connect(2) finished with exit code 2 Failed: – Farhan Mar 22 '13 at 16:05
Yes, I ran across the same problem, trying myself, haven't looked in detail though. You could use a trace and debug for the command to see what's going on. e.g. puppet kick --trace --host <hostname> --debug – iamauser Mar 22 '13 at 16:09
kick won't work unless listen = true is set in the agent's puppet.conf. It's also deprecated, you probably don't want to start using it now. – Shane Madden Mar 23 '13 at 23:29

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.