1
edit
Changes
no edit summary
2) Puppet: it is installed in the clients that are to be managed by puppetmaster.
'''How puppet works'''
All clients will communicate with puppet master periodically to see if there are any changes for respective configuration, and download the latest configuration and make sure it is synchronize with that configuration. Once the configuration applied, it will report to the puppet master asking if there is anything needs to be changed.
To manually sign the certificate
#'''puppetca –sign <certificate CN>'''
note: it is done in puppet master. To list the requsete certificate, issu the commad
#'''puppetca –list'''
5)Puppet receives the signed certificate. Once the puppet receives the certificate, it will start configuration run immediately.
Note: the files and templates are transferred using SSL communication.
'''Supported system platform
'''
Linux
Windows
Installing puppet.
On server, In this case it will be Hongkong.proximity.on.ca
# '''yum install puppet-server'''
it will install puppetmaster and puppet on the server which is to be as puppetmaster.
# '''yum install mysql-server ruby-mysql'''
# '''yum install ruby-RRDtool'''
it will install ruby library.
On client, in this case it will be Ireland.proximity.on.ca
# '''yum install puppet'''
it will install puppet client on the client system.
c) start the puppet master.
#'''puppetmasterd –mkusers'''
this option will create the puppet user that is needed.
Once the puppetmaster daemon is stated, it will create the necessary files and folders under /var/lib/puppet.
#'''ls /var/lib/puppet'''
should have bucket, clientsbucket, facts, reports, ssl, yaml, class.txt, client_yaml, l ib, rrd, state
all the details information about these files and folder will be included in the next blog.
# '''service puppetmaster start'''
d) start the puppet client.
On the client, Ireland
#'''puppetd –verbose'''
when the puppet client daemon starts, it creates the necessary certificate and waits for the certificate to be signed by the puppetmaster.
On the server
#'''puppetca –list'''
this will list the all the requested certificate that are to be signed by puppetmaster.
#'''puppetca –-sign ireland.proximity.on.ca'''