puppetd --test 出錯(cuò)（已解決）

a6447

在客戶端B上運(yùn)行”puppetd --server desktop.abc.com --test“的時(shí)候，報(bào)錯(cuò)：
err: Could not retrieve catalog from remote server: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed.  This is often because the time is out of sync on the server or client
warning: Not using cache on failed catalog
[root@cluster01 ~]#
err: Could not send report: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed.  This is often because the time is out of sync on the server or client

以為是時(shí)間不同步問(wèn)題，由于A和B都沒(méi)有連外網(wǎng)能力，通過(guò)rdate命令把B的時(shí)間和puppetmaster的時(shí)間同步，結(jié)果還是一樣。

This is often because the time is out of sync on the server or client  這句話，是指A和B之間的時(shí)間不同步，還是什么別的意思？


部分軟件版本：
puppet-2.7.13.tar
facter-1.7.3.tar
ruby-1.8.7.352-3.el6.x86_64.rpm

wenhq

時(shí)間不同步

a6447

我用rdate命令，讓2臺(tái)楓葉時(shí)間同步了。回復(fù) 2# wenhq


   

wenhq

ntpupdate
或者啟動(dòng)ntp service

a6447

我改用RPM包安裝，那個(gè)問(wèn)題沒(méi)有出現(xiàn)。

yuhongchun 發(fā)表于 2013-11-05 17:27
puppet連接對(duì)時(shí)間要求是非常嚴(yán)格的，它要求時(shí)間是精準(zhǔn)的，不然證書(shū)申請(qǐng)就是失敗的，建議二臺(tái)機(jī)器都采用 ...