Chef bootstrapping new node无法向Chef服务器进行身份验证(http 401)

时间:2015-12-15 16:22:12

标签: chef

我在CentOS 6上有一个Chef服务器。我已经引导了大约92个节点。当我尝试引导新节点(CentOS 6)时,问题就开始了。 我运行的命令是:

knife bootstrap node10 -N node10 -x user -P 'password' --sudo

输出如下:

node10 warning: /tmp/install.sh.1137/chef-12.5.1-1.el6.x86_64.rpm: Header V4 DSA/SHA1 Signature, key ID 52ff435y: NOKEY

node10 Preparing...  ########################################### [100%]

node10    1:chef     ########################################### [100%]

node10 Thank you for installing Chef!

node10 Starting first Chef Client run...

node10 Starting Chef Client, version 12.5.1

node10 Creating a new client identity for node10 using the validator key.


node10 =========================================================

node10 Chef encountered an error attempting to create the client "node10"

node10 =========================================================

node10 Authentication Error:

node10 Failed to authenticate to the chef server (http 401).


node10 Server Response:


node10 Invalid signature for user or client 'org-validator'


node10 Relevant Config Settings:


node10 chef_server_url         "https://chef01.corp/organizations/devdept"

node10 validation_client_name  "org-validator"

node10 validation_key          "/etc/chef/validation.pem"


node10 If these settings are correct, your validation_key may be invalid.

node10 Running handlers:

node10 [2015-12-15T18:11:13+02:00] ERROR: Running exception handlers

node10 Running handlers complete

node10 [2015-12-15T18:11:13+02:00] ERROR: Exception handlers complete

node10 Chef Client failed. 0 resources updated in 13 minutes 48 seconds

node10 [2015-12-15T18:11:13+02:00] FATAL: Stacktrace dumped to /var/chef/cache/chef-stacktrace.out

node10 [2015-12-15T18:11:13+02:00] ERROR: 401 "Unauthorized"

node10 [2015-12-15T18:11:13+02:00] FATAL: Chef::Exceptions::ChildConvergeError: 
Chef run process exited unsuccessfully (exit code 1)

有什么要做的? 正如我所说,这台机器是全新的。

谢谢你, 加布里埃尔

1 个答案:

答案 0 :(得分:2)

有人可能在您不知情的情况下在Chef服务器上重新生成验证器密钥。您需要新密钥的副本。或者,您可以通过从工作站和配置文件中删除它来切换到无验证器的引导。