mario.verbelen.org

Last Friday I was working on a new puppet installation and I had a nice problem.

We had to install several brand-new servers so we created a puppetmaster-server with cobbler, ldap and subversion.
On most of the servers the installation went without any problem
But for a few servers we had a Certificate validation failed

warning: Certificate validation failed; considering using the certname configuration option
err: Could not retrieve catalog: Certificates were not trusted: SSL_connect returned=1 errno=0 
  state=SSLv3 read server certificate B: certificate verify failed
warning: Not using cache on failed catalog

After changing the certname's and server-name of puppet coz of reading problems with dns on google(this installation has no dns servers at all) it was still failing on the same servers??
but true I was only thinking about naming and forget the rest of details about certifications

After that someone asked for implementing ntp "DAMN the date!"

So if you are creating a puppet setup with automated install like cobbler or some other pxe setup don't forget to sync date before running puppetd
Even with a stand alone setup and if you don't have ntp running ... think about it