Ask Your Question
0

Disable HTTPS on PE 3.0.1

asked 2013-09-20 11:46:10 -0600

theillien gravatar image

updated 2013-09-20 11:51:10 -0600

I keep getting the following error when attempting to connect an agent to a newly installed PE 3.0.1 instance:

Warning: Unable to fetch my node definition, but the agent run will continue:
Warning: Error 400 on SERVER: Failed to find tcecapm2r5pa01.ecap.cciio via exec: Execution of '/usr/bin/env PUPPET_DASHBOARD_URL=https://dashboard.ecap.cciio /usr/share/puppet-dashboard/bin/external_node tcecapm2r5pa01.ecap.cciio' returned 127: 
Info: Retrieving plugin
Error: Could not retrieve catalog from remote server: Error 400 on SERVER: Failed to submit 'replace facts' command for tcecapm2r5pa01.ecap.cciio to PuppetDB at tcecapm1r6cm02.ecap.cciio:8081: SSL_connect ...
(more)
edit retag flag offensive close merge delete

2 Answers

Sort by ยป oldest newest most voted
0

answered 2013-09-20 21:34:24 -0600

GregLarkin gravatar image

updated 2013-09-20 21:35:01 -0600

Exit code 127 on your ENC script means that some executable it tried to call could not be found in the PATH. Can you successfully run the external_node script by hand as the puppet user?

You can add the command:

env > /tmp/myenv.$$

to the external_node script near the top to get a report of the environment that the script has. If the PATH variable is very minimal, and an external program is called from the script but not available in the existing PATH, you can explicitly set the PATH in the script by adding a line like:

export PATH ...
(more)
edit flag offensive delete link more
0

answered 2013-09-21 10:43:07 -0600

The error you need to resolve is in this line:

Error: Could not retrieve catalog from remote server: Error 400 on SERVER: Failed to submit 'replace facts' command for tcecapm1r6cm02.ecap.cciio to PuppetDB at tcecapm1r6cm02.ecap.cciio:8081: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed: [certificate revoked for /CN=tcecapm1r6cm02.ecap.cciio]

The certificate of the agent on node tcecapm1r6cm02.ecap.cciio has been revoked. You will need to generate a new certificate for the node, and get is signed.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2013-09-20 11:46:10 -0600

Seen: 315 times

Last updated: Sep 21 '13