puppet自动认证授权

puppet自动授权认证后可以自动化地为每个agent签发证书，不需要手动执行
在puppet服务端的主配置文件中添加以下语句
[root@master puppet]# cat puppet.conf |grep autosign
    # Whether to enable autosign.  Valid values are true (which
    # autosigns any key request, and is a very bad idea), false (which
    # never autosigns any key request), and the path to a file, which
    # The default value is '$confdir/autosign.conf'.
    autosign = /etc/puppet/autosign.conf
    autosign = true
    autosign = /etc/puppet/autosign.conf
添加autosign.conf文件
[root@master puppet]# cat autosign.conf
*.andy.com
允许所有andy.com域下的主机
删除失效证书
puppet cert --clean agent3.andy.com
client端删除认证
rm -rf /var/lib/puppet/ssl/*
重新请求证书
puppet agent --server master.andy.com --test

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/27181165/viewspace-1061844/，如需转载，请注明出处，否则将追究法律责任。

转载于:http://blog.itpub.net/27181165/viewspace-1061844/