Salt Minion Problems

scottalanmiller

i asked and have been trying to do step 1.

The command for step one gave you an error about unaccepted keys? That's not right. Something wrong with that error message as that is a command only for accepted keys.

scottalanmiller

It does give that error though. That's messed up. How confusing is that?

WrCombs

@scottalanmiller which is why i think it gave me an error. however i have followed the steps, and im still getting the same error message on step 3 when i put the hostname in

WrCombs

@WrCombs said in Salt Minion Problems:

@scottalanmiller which is why i think it gave me an error. however i have followed the steps, and im still getting the same error message on step 3 when i put the hostname in

https://i.imgur.com/I2hcg7d.png

here is where i am now

scottalanmiller

@WrCombs said in Salt Minion Problems:

@scottalanmiller which is why i think it gave me an error. however i have followed the steps, and im still getting the same error message on step 3 when i put the hostname in

That's because the correct key has not yet appeared:

# salt-key --list-all
Accepted Keys:
Denied Keys:
Unaccepted Keys:
ip-65-75-137-152.local
Rejected Keys:

WrCombs

@WrCombs wait.
let me retry that with the correct name

scottalanmiller

@WrCombs said in Salt Minion Problems:

@WrCombs wait.
let me retry that with the correct name

Won't work, the minion has not sent its key yet.

WrCombs

@WrCombs same error occurss

WrCombs

@Romo neither is mine now

Romo

@scottalanmiller shouldn't the salt-master have already sent its own key? In my vm the first key I accepted was the key my master.
0_1485893426073_Screenshot from 2017-01-31 14:10:13.png

This could mean there is something else that's wrong don't you think?

scottalanmiller

@Romo said in Salt Minion Problems:

@scottalanmiller shouldn't the salt-master have already sent its own key? In my vm the first key I accepted was the key my master.

This could mean there is something else that's wrong don't you think?

Which part? The master? That seems fine.

Romo

@scottalanmiller Yes, on my install the master shows fine on @WrCombs the master doesnt appear.

scottalanmiller

Don't rename the hosts, that's going to lead to more problems.

scottalanmiller

I'm rebooting to test something. For some reason, the Salt Master never showed up in the key list either. This implies something is certainly wrong.

Romo

@scottalanmiller said in Salt Minion Problems:

I'm rebooting to test something. For some reason, the Salt Master never showed up in the key list either. This implies something is certainly wrong.

Exactly thats what I ment

@scottalanmiller said in Salt Minion Problems:

@Romo said in Salt Minion Problems:

@scottalanmiller shouldn't the salt-master have already sent its own key? In my vm the first key I accepted was the key my master.

This could mean there is something else that's wrong don't you think?

Which part? The master? That seems fine.

Romo

@WrCombs By the way, do you remember if you did open the ports in the master?

Romo

All set on my install, I hadn't reloaded the firewall rules so that's why my minion could reach the master.

0_1485894347865_Screenshot from 2017-01-31 14:25:31.png

scottalanmiller

@Romo said in Salt Minion Problems:

@WrCombs By the way, do you remember if you did open the ports in the master?

He did, I looked.

scottalanmiller

Here is his firewall...

# firewall-cmd --list-all
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: eth0
  sources: 
  services: dhcpv6-client ssh
  ports: 4505-4506/tcp
  protocols: 
  masquerade: no
  forward-ports: 
  sourceports: 
  icmp-blocks: 
  rich rules:

scottalanmiller

Here is the error message on the Salt Master's minion process:

Jan 31 20:32:37 salt salt-minion[901]: [ERROR   ] The Salt Master has cached the public key for this node, this salt minion will wait for 10 seconds before attempting to re-authenticate

Unsolved Salt Minion Problems