将chef-client上的默认validation_client_name更改为“orgname-validator”

时间:2015-04-02 16:06:52

标签: chef chef-recipe

我需要将我的chef-server上的默认attibute validation_client_name更改为我的orgname-validator,因为它在引导我的节点时出错:

Chef encountered an error attempting to create the client "mynode-1"

 Authentication Error:
 ---------------------
 Failed to authenticate to the chef server (http 401).

 Server Response:
 ----------------
 Invalid signature for user or client 'chef-validator'

 Relevant Config Settings:
 -------------------------
 chef_server_url         "https://chef.myorgname.com/organizations/orgname"
 validation_client_name  "chef-validator"
 validation_key          "/etc/chef/validation.pem"

 If these settings are correct, your validation_key may be invalid.

 [2015-04-02T15:30:44+00:00] FATAL: Stacktrace dumped to /var/chef/cache/chef-stacktrace.out
 Chef Client failed. 0 resources updated in 1.426514217 seconds
 [2015-04-02T15:30:44+00:00] ERROR: 401 "Unauthorized"
 [2015-04-02T15:30:44+00:00] FATAL: Chef::Exceptions::ChildConvergeError: Chef run process exited unsuccessfully (exit code 1)

我该怎么做?

Chef-Server 12.

1 个答案:

答案 0 :(得分:1)

您可以随时通过Chef服务器Web界面重置密钥。弹出框将显示您可以剪切/粘贴到validation.pem文件中的新密钥。

另外,我很确定你错过了一个client_key,但可能不是这样。您是否尝试从Chef服务器Web界面下载默认的入门工具包?它预先烘烤了所有这些东西。