[Puppet Users] Need help! Puppet could not request certificate: No route to host -connect(2)

Try using "telnet <your_master_fqdn> 8140" This will validate the network
on the proper port. ping does not use port 8140.

I am able to ssh to both host. Am now getting the error: [Could not
request certificate: Connection refused]

This error is different to the first error. This one seems to deal with IP
Tables rules.

You get also this error when puppet master server is disabled or
unresponsive (there is no response to the client and you get error)
Make sure that your puppet master server is running by command:

ps -aux

If process is running and you still get this error message, kill this
process (kill 'PID') and try run server in no--damenoize mode by command:

puppet master --no-daemonize --verbose

then try connect again and observe server responses
Best Regards

W dniu wtorek, 23 kwietnia 2013 16:57:02 UTC+2 użytkownik [email protected]
napisał:

It pretty much says that the port is not open. This may or may not be
iptables related.

On the agent, make extra sure that "puppet" (or whatever you use as
servername) resolves to a valid IP of the master machine.

On the master, use "netstat -tlnp" to verify that there is indeed a
process listening to port 8140, either on 0.0.0.0 or the dedicated
master IP address. In the former case, make sure the master IP is bound
to the machine.

HTH,
Felix

Could you add the hostnames and IP addresses of master and client in
/etc/hosts on both master and client. On RHEL 5.8, I was able to fix this
error after flushing the iptables with "iptables -F" and then saving it
with "service iptables save".


Kind Regards,
Rony Thomas

Thanks Rony, that worked for me.

Hi Rony,
I was having the same issue and given iptables -F and service iptables save
and it worked. When i gave to open port 8140 on master server in Iptables
it did not worked, what exactly these command are doing to make it work?

+1 to "iptables -F"

I was saving exactly same issue on a setup I created using Vagrant - one
master and some slaves. The agents won't connect to master no matter what
ping/ssh etc. said. Telnet didn't work of course in spite of all other
right configurations. Thanks for making my day!

Just for a reference, what worked for me was to reconfigure the firewall:

firewall-cmd --zone=public --add-port=8140/tcp --permanent

firewall-cmd --reload


Source: http://www.unixmen.com/install-puppet-server-centos-7/

No need to flush all iptables rules...

@Karel Lenc
After hours and days of headbang.
That did worked.
Thanks!!!