Unsolved Salt Minion Problems

[scottalanmiller]

It does give that error though. That's messed up. How confusing is that?

[WrCombs]

@scottalanmiller which is why i think it gave me an error. however i have followed the steps, and im still getting the same error message on step 3 when i put the hostname in

[WrCombs]

@WrCombs said in Salt Minion Problems:

@scottalanmiller which is why i think it gave me an error. however i have followed the steps, and im still getting the same error message on step 3 when i put the hostname in

https://i.imgur.com/I2hcg7d.png

here is where i am now

[scottalanmiller]

@WrCombs said in Salt Minion Problems:

@scottalanmiller which is why i think it gave me an error. however i have followed the steps, and im still getting the same error message on step 3 when i put the hostname in

That's because the correct key has not yet appeared:

# salt-key --list-all
Accepted Keys:
Denied Keys:
Unaccepted Keys:
ip-65-75-137-152.local
Rejected Keys:

[WrCombs]

@WrCombs wait.
let me retry that with the correct name

[scottalanmiller]

@WrCombs said in Salt Minion Problems:

@WrCombs wait.
let me retry that with the correct name

Won't work, the minion has not sent its key yet.

[WrCombs]

@WrCombs same error occurss

[WrCombs]

@Romo neither is mine now

[Romo]

@scottalanmiller shouldn't the salt-master have already sent its own key? In my vm the first key I accepted was the key my master.

This could mean there is something else that's wrong don't you think?

[scottalanmiller]

@Romo said in Salt Minion Problems:

@scottalanmiller shouldn't the salt-master have already sent its own key? In my vm the first key I accepted was the key my master.

This could mean there is something else that's wrong don't you think?

Which part? The master? That seems fine.

[Romo]

@scottalanmiller Yes, on my install the master shows fine on @WrCombs the master doesnt appear.

[scottalanmiller]

Don't rename the hosts, that's going to lead to more problems.

[scottalanmiller]

I'm rebooting to test something. For some reason, the Salt Master never showed up in the key list either. This implies something is certainly wrong.

[Romo]

@scottalanmiller said in Salt Minion Problems:

I'm rebooting to test something. For some reason, the Salt Master never showed up in the key list either. This implies something is certainly wrong.

Exactly thats what I ment

@scottalanmiller said in Salt Minion Problems:

@Romo said in Salt Minion Problems:

@scottalanmiller shouldn't the salt-master have already sent its own key? In my vm the first key I accepted was the key my master.

This could mean there is something else that's wrong don't you think?

Which part? The master? That seems fine.

[Romo]

@WrCombs By the way, do you remember if you did open the ports in the master?

[Romo]

All set on my install, I hadn't reloaded the firewall rules so that's why my minion could reach the master.

[scottalanmiller]

@Romo said in Salt Minion Problems:

@WrCombs By the way, do you remember if you did open the ports in the master?

He did, I looked.

[scottalanmiller]

Here is his firewall...

# firewall-cmd --list-all
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: eth0
  sources: 
  services: dhcpv6-client ssh
  ports: 4505-4506/tcp
  protocols: 
  masquerade: no
  forward-ports: 
  sourceports: 
  icmp-blocks: 
  rich rules: 

[scottalanmiller]

Here is the error message on the Salt Master's minion process:

Jan 31 20:32:37 salt salt-minion[901]: [ERROR   ] The Salt Master has cached the public key for this node, this salt minion will wait for 10 seconds before attempting to re-authenticate

[Romo]

@scottalanmiller said in Salt Minion Problems:

The Salt Master has cached the public key for this node, this salt minion will wait for 10 seconds before attempting to re-authenticate

That happens to all minions when they are waiting for the master to approve their key.