Can node.rb work with foreman/LDAP behind apache2/ssl?

Support
#1

I configured foreman to use LDAP auth and also to work behind
apache2/Passenger/ssl, and now my external_nodes setup fails :

/etc/puppet/node.rb pirates

/usr/lib/ruby/1.8/net/http.rb:2022:in read_status_line': wrong status line: "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">" (Net::HTTPBadResponse) from /usr/lib/ruby/1.8/net/http.rb:2009:inread_new'
from /usr/lib/ruby/1.8/net/http.rb:1050:in request' from /etc/puppet/node.rb:14 from /usr/lib/ruby/1.8/net/http.rb:543:instart'
from /usr/lib/ruby/1.8/net/http.rb:440:in `start'
from /etc/puppet/node.rb:13

Is this supposed to work?

For authentication, I tried adding username:password@ to the URL in
node.rb, but it fails to parse the URL!

Thanks a lot,
Mohamed.

#2

Hi,

currently, you can fetch the external node yaml file without authentication
(e.g. fetching it should just work).

in your example you use a short name for your host, maybe thats your
problem?

cheres,
Ohad

··· On Tue, Jun 15, 2010 at 12:54 PM, Mohamed Lrhazi wrote:

I configured foreman to use LDAP auth and also to work behind
apache2/Passenger/ssl, and now my external_nodes setup fails :

/etc/puppet/node.rb pirates

/usr/lib/ruby/1.8/net/http.rb:2022:in read_status_line': wrong status line: "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">" (Net::HTTPBadResponse) from /usr/lib/ruby/1.8/net/http.rb:2009:inread_new’
from /usr/lib/ruby/1.8/net/http.rb:1050:in request' from /etc/puppet/node.rb:14 from /usr/lib/ruby/1.8/net/http.rb:543:instart’
from /usr/lib/ruby/1.8/net/http.rb:440:in `start’
from /etc/puppet/node.rb:13

Is this supposed to work?

For authentication, I tried adding username:password@ to the URL in
node.rb, but it fails to parse the URL!

Thanks a lot,
Mohamed.

–
You received this message because you are subscribed to the Google Groups
"Foreman users" group.
To post to this group, send email to foreman-users@googlegroups.com.
To unsubscribe from this group, send email to
foreman-users+unsubscribe@googlegroups.comforeman-users%2Bunsubscribe@googlegroups.com
.
For more options, visit this group at
http://groups.google.com/group/foreman-users?hl=en.

#3

Thanks Ohad…

It seems with LDAP enabled, node.rb keeps working indeed.
But not when I add SSL to the mix:

/etc/puppet/node.rb pirates.uis.georgetown.edu

 --(Wed,Jun16)--

/usr/lib/ruby/1.8/net/http.rb:2022:in read_status_line&#39;: wrong status line: &quot;&lt;!DOCTYPE HTML PUBLIC \&quot;-//IETF//DTD HTML 2.0//EN\&quot;&gt;&quot; (Net::HTTPBadResponse) from /usr/lib/ruby/1.8/net/http.rb:2009:inread_new'
from /usr/lib/ruby/1.8/net/http.rb:1050:in request&#39; from /etc/puppet/node.rb:14 from /usr/lib/ruby/1.8/net/http.rb:543:instart'
from /usr/lib/ruby/1.8/net/http.rb:440:in `start'
from /etc/puppet/node.rb:13

Am not good with Ruby just yet… Is it hard to improve node.rb and
push_facts.rb to support HTTPS?
and maybe also support foreman's authentication?

Thanks a lot.
Mohamed.

··· On Wed, Jun 16, 2010 at 1:12 AM, Ohad Levy wrote: > Hi, > > currently, you can fetch the external node yaml file without authentication > (e.g. fetching it should just work). > > in your example you use a short name for your host, maybe thats your > problem? > > cheres, > Ohad > > On Tue, Jun 15, 2010 at 12:54 PM, Mohamed Lrhazi wrote: >> >> I configured foreman to use LDAP auth and also to work behind >> apache2/Passenger/ssl, and now my external_nodes setup fails : >> >> # /etc/puppet/node.rb pirates >> /usr/lib/ruby/1.8/net/http.rb:2022:in `read_status_line': wrong status >> line: "" >> (Net::HTTPBadResponse) >> from /usr/lib/ruby/1.8/net/http.rb:2009:in `read_new' >> from /usr/lib/ruby/1.8/net/http.rb:1050:in `request' >> from /etc/puppet/node.rb:14 >> from /usr/lib/ruby/1.8/net/http.rb:543:in `start' >> from /usr/lib/ruby/1.8/net/http.rb:440:in `start' >> from /etc/puppet/node.rb:13 >> >> >> Is this supposed to work? >> >> For authentication, I tried adding username:password@ to the URL in >> node.rb, but it fails to parse the URL! >> >> >> Thanks a lot, >> Mohamed. >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Foreman users" group. >> To post to this group, send email to foreman-users@googlegroups.com. >> To unsubscribe from this group, send email to >> foreman-users+unsubscribe@googlegroups.com. >> For more options, visit this group at >> http://groups.google.com/group/foreman-users?hl=en. >> > > -- > You received this message because you are subscribed to the Google Groups > "Foreman users" group. > To post to this group, send email to foreman-users@googlegroups.com. > To unsubscribe from this group, send email to > foreman-users+unsubscribe@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/foreman-users?hl=en. >

–
" Logic merely sanctions the conquests of the intuition."
Jacques Hadamard