Re: Funcd daemon not starting on a minion

[Vinay Kudithipudi <vinay@xxxxxxxxxxxxxxx>]

Seth - Good news :).. I was able to get func to work. After doing some research into the error listed below, I noticed that the SSL keys were not matching between the master and the minion. I deleted all the keys and reran the daemons and everything is working fine now..

Thx for your help.

-= V
http://kudithipudi.org

On Fri, Oct 15, 2010 at 3:22 PM, Vinay Kudithipudi <vinay@xxxxxxxxxxxxxxx> wrote:

Seth - I get the following output when I run "funcd" on the minion

[root@pil-vm-ora-01 ~]# funcd
serving...

Traceback (most recent call last):
  File "/usr/bin/funcd", line 23, in ?
    server.main(sys.argv)
  File "/usr/lib/python2.4/site-packages/func/minion/server.py", line 291, in main
    serve()
  File "/usr/lib/python2.4/site-packages/func/minion/server.py", line 181, in serve
    server =FuncSSLXMLRPCServer((listen_addr, listen_port))
  File "/usr/lib/python2.4/site-packages/func/minion/server.py", line 216, in __init__
    self.ca)
  File "/usr/lib/python2.4/site-packages/func/minion/AuthedXMLRPCServer.py", line 74, in __init__
    SSLCommon.BaseSSLServer.__init__(self, address, AuthedSimpleXMLRPCRequestHandler, pkey, cert, ca_cert, timeout=timeout)
  File "/usr/lib/python2.4/site-packages/certmaster/SSLCommon.py", line 73, in __init__
    self.ssl_ctx = CreateSSLContext(pkey, cert, ca_cert)
  File "/usr/lib/python2.4/site-packages/certmaster/SSLCommon.py", line 40, in CreateSSLContext
    ctx.use_privatekey_file(pkey)
OpenSSL.SSL.Error: [('x509 certificate routines', 'X509_check_private_key', 'key values mismatch')]

-= V
http://kudithipudi.org

On Thu, Oct 14, 2010 at 8:45 AM, seth vidal <skvidal@xxxxxxxxxxxxxxxxx> wrote:

On Wed, 2010-10-13 at 17:09 -0500, Vinay Kudithipudi wrote:
> Seth - On the master server, I don't see anything
> in /etc/pki/certmaster other than a "ca" directory with two files
> certmaster.crt and certmaster.key . On the minion server, I see the
> following
>
> -rw-r--r-- 1 root root 1428 Oct 11 22:27 ca.cert
> -rw-r--r-- 1 root root 1411 Oct 11 22:27
> pil-vm-ora-01.domain.prod.cert
> -rw-r--r-- 1 root root 1106 Oct 11 22:27 pil-vm-ora-01.domain.prod.csr
> -rw------- 1 root root 1679 Oct 11 22:27 pil-vm-ora-01.domain.prod.pem
>
> pil-vm-ora-01.domain.prod is the name of the minion.
>
> Thx again for your help..
>

okay so the minion has its keys and cert.

If you just run:

funcd

on the command line - what does it output?

-sv

_______________________________________________
Func-list mailing list
Func-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/func-list