This is the second article of a trilogy. The first article can be found here
In the first article the installation of puppet on ubuntu was discussed. In this article we talk about making a trust between a puppet client and a puppet server.
This is the crucial step that is needed in order te let an client obtain the puppet recipes for processing.
The first step is installing the puppet client on a (new) server. The steps involved are:
sudo apt-get install puppet
Now we need to make an connection between the client and the server. On the client we do this by issuing the following command (assuming that the server is reachable by the name puppet).:
sudo puppetd --verbose
This command will end with the message that no valid certificate is received. But this command does give the puppet master (the server) sufficient information to continue the trust process.
At the puppet master server the following command can be issued to determine the names of the client dat attempted to make an connection.
sudo puppetca --list
To make a trust between the master and one of the above mentioned clients issue the following command on the server.
sudo puppetca --sign <clientname as listed by puppetca --list>
On the client the command
sudo puppetd --verbose
will now continue as expected without the message that no valid certificate could be found. But any errors in recipes will still result in failure messages.