Exiting; no certificate found and waitforcert is disabled

4
Exiting; no certificate found and waitforcert is disabled Error: [root@redcent65 puppet-enterprise-3.1.0-el-6-x86_64]# puppet agent --test Exiting; no certificate found and waitforcert is disabled [root@redcent65 puppet-enterprise-3.1.0-el-6-x86_64]# Cause: [On the Agent: Check to see if there are any pending certification requests] [root@redcent65 /]# cd /etc/puppetlabs/puppet/ssl/ [root@redcent65 ssl]# ls certificate_requests certs private private_keys public_keys [root@redcent65 ssl]# cd certificate_requests/ [root@redcent65 certificate_requests]# ls redcent65.pem [root@redcent65 certificate_requests]# [Result: I found one certificate request as seen above] Resolution: 1. On the Agent: Delete the pending cert(s): [root@redcent65 /]# rm -rf /etc/puppetlabs/puppet/ssl/* 2. Re-run the 'puppet-agent test' to create and submit new cert to the master. [root@redcent65 /]# puppet agent --test Info: Creating a new SSL key for redcent65 Info: Caching certificate for ca Info: Creating a new SSL certificate request for redcent65

description

While adding the second agent [node] to the puppet master encountered this error.

Transcript of Exiting; no certificate found and waitforcert is disabled

Page 1: Exiting; no certificate found and waitforcert is disabled

Exiting; no certificate found and waitforcert is disabled

Error:

[root@redcent65 puppet-enterprise-3.1.0-el-6-x86_64]# puppet agent --test

Exiting; no certificate found and waitforcert is disabled

[root@redcent65 puppet-enterprise-3.1.0-el-6-x86_64]#

Cause:

[On the Agent: Check to see if there are any pending certification requests]

[root@redcent65 /]# cd /etc/puppetlabs/puppet/ssl/

[root@redcent65 ssl]# ls

certificate_requests certs private private_keys public_keys

[root@redcent65 ssl]# cd certificate_requests/

[root@redcent65 certificate_requests]# ls

redcent65.pem

[root@redcent65 certificate_requests]#

[Result: I found one certificate request as seen above]

Resolution:

1. On the Agent: Delete the pending cert(s):

[root@redcent65 /]# rm -rf /etc/puppetlabs/puppet/ssl/*

2. Re-run the 'puppet-agent test' to create and submit new cert to the master.

[root@redcent65 /]# puppet agent --test

Info: Creating a new SSL key for redcent65

Info: Caching certificate for ca

Info: Creating a new SSL certificate request for redcent65

Page 2: Exiting; no certificate found and waitforcert is disabled

Info: Certificate Request fingerprint (SHA256):

50:8D:F7:CD:23:C3:2B:28:A8:BE:C0:CA:F4:FE:97:7D:E9:61:1A:13:DD:B7:36:FB:16:6F:61:A2:A2:2A:63:35

[root@redcent65 /]#

3. On the Master: run 'puppet cert --sign --all"

[root@redhatcentos puppet-enterprise-3.1.0-el-6-x86_64]# puppet cert --sign --all

Notice: Signed certificate request for redcent65

Notice: Removing file Puppet::SSL::CertificateRequest redcent65 at

'/etc/puppetlabs/puppet/ssl/ca/requests/redcent65.pem'

[root@redhatcentos puppet-enterprise-3.1.0-el-6-x86_64]#

4. On the Agent: Re-run the puppet agent test.

[root@redcent65 /]# puppet agent --test

Info: Retrieving plugin

Info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/facter_dot_d.rb

Info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/puppet_vardir.rb

Info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/ip6tables_version.rb

Info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/windows.rb

Info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/puppetdb_server_status.rb

Info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/iptables_version.rb

Info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/concat_basedir.rb

Info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/custom_auth_conf.rb

Info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/iptables_persistent_version.rb

Info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/pe_version.rb

Info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/root_home.rb

Info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/postgres_default_version.rb

Info: Caching catalog for redcent65

Info: Applying configuration version '1386270074'

Notice: Finished catalog run in 0.16 seconds

[root@redcent65 /]#

Page 3: Exiting; no certificate found and waitforcert is disabled

5. On the Master: Refreshing the page should make the agent Node show-up as shown in the figure

below.

Note: I ran into this issue while adding the second agent (node) and found the solution googling.

Information & Download:

http://info.puppetlabs.com/download-pe-3-1.html?

Documentation:

http://docs.puppetlabs.com/pe/latest/overview_whats_new.html

Demos, Case Studies, White papers:

http://puppetlabs.com/resources/overview-2

Page 4: Exiting; no certificate found and waitforcert is disabled

So what is Puppet [http://puppetlabs.com]?

Puppet is IT automation software that helps system administrators manage infrastructure throughout its

lifecycle, from provisioning and configuration to orchestration and reporting. Using Puppet, you can

easily automate repetitive tasks, quickly deploy critical applications, and proactively manage change,

scaling from 10s of servers to 1000s, on-premise or in the cloud.

In short: Puppet is an open source configuration management tool to manage the configuration of Unix-

like and Microsoft Windows systems.

For quick video:

http://www.youtube.com/watch?v=j8ImF23jZAg&feature=player_embedded

Is it free [as in open source] or commercial?

Puppet is available as both open source and commercial software. For the difference between the two,

please read the following article:

http://puppetlabs.com/puppet/enterprise-vs-open-source

FAQ:

http://puppetlabs.com/puppet/faq

How did I discover this software?

Well, that's interesting, until yesterday I had no clue about this software at all. I was basically browsing

jobs on the job sites and came across a term called 'puppet' and that led me to puppetlabs.com

It's users as per Wikipedia:

Puppet is used by the Wikimedia Foundation,[5] ARIN, Reddit,[6] Dell, Rackspace, Zynga, Twitter, the

New York Stock Exchange, PayPal, Disney, Citrix Systems, Oracle, Yandex, the University of North Texas,

the Los Alamos National Laboratory, Stanford University, Lexmark and Google, among others.[7]

[email protected]