I have 3 servers set up. A puppet master using passenger (puppet-server1), dashboard using passenger (puppet-server2) and puppetdb (puppet-server3).
I cannot get the inventory service working in the dashboard.
The puppet master is able to sign certs and hand out manifests.
The nodes have checked in to the dashboard ok
The puppetdb appears to be working - logs files as follows:
2012-12-13 17:53:10,899 INFO [command-proc-74] [puppetdb.command] [8490148f-865a-45c8-b5b5-2c8824d753dd] [replace facts] puppet-server3.test.net
2012-12-13 17:53:11,041 INFO [command-proc-74] [puppetdb.command] [dfcc5168-06df-41d4-9a97-77b4cd3f4a2b] [replace catalog] puppet-server3.test.net
2012-12-13 17:55:28,600 INFO [command-proc-74] [puppetdb.command] [b2cc0a96-0404-49f5-96ad-19c778508d3d] [replace facts] puppet-client2.test.net
2012-12-13 17:55:28,729 INFO [command-proc-74] [puppetdb.command] [4dc4b8f3-06df-4dad-a89a-92ac80447b99] [replace catalog] puppet-client2.test.net
The puppet master has the following configured in puppet.conf
[master]
certname = puppet-server1.test.net
storeconfigs = true
storeconfigs_backend = puppetdb
reports = store, http
reporturl = http://puppet-server2.test.net/reports/upload
The puppet master have the following configured in auth.conf
#access for puppet dashboard facts
path /facts
auth yes
method find, search
allow dashboard
The puppet dashboard has this configured in /usr/share/puppet-dashboard/config/settings.yml
# Hostname of the inventory server.
inventory_server: 'puppet-server3.test.net'
# Port for the inventory server.
inventory_port: 8081
The inventory is on as I see a link to the inventory in the dashboard server
But I am getting this error:
Inventory
Could not retrieve facts from inventory service: SSL_connect SYSCALL returned=5 errno=0 state=SSLv3 read finished A
clearly an SSL error - but I have followed the documentation and have no idea how to fix this. Can anyone help please?
Oli
openssl s_client -connect puppet-server3.test.net:8081
- let's see what output we get from that.responsesubject=/CN=puppet-server3.tcl-oob.net issuer=/CN=Puppet CA: puppet-server1.tcl-oob.net --- Acceptable client certificate CA names /CN=Puppet CA: puppet-server1.tcl-oob.net --- SSL handshake has read 2365 bytes and written 178 bytes --- Verify return code: 21 (unable to verify the first certificate)
inventory_server: 'puppet-server1.tcl-oob.net' # Port for the inventory server:inventory_port: 8081
but as far as I can tell the puppet master isn't listening on port 8081. So are you saying theinventory_server
in the dashboard should be the puppet master. What happens if I have multiple puppet masters? Thanks for your help!