Share Pastebin
Guest
Public paste!

iqbala

By: a guest | Jun 10th, 2009 | Syntax: None | Size: 29.68 KB | Hits: 61 | Expires: Never
Copy text to clipboard
  1. # The configuration file for puppetd.  Note that this file
  2. # is likely to have unused configuration parameters in it; any parameter that's
  3. # valid anywhere in Puppet can be in any config file, even if it's not used.
  4. #
  5. # Every section can specify three special parameters: owner, group, and mode.
  6. # These parameters affect the required permissions of any files specified after
  7. # their specification.  Puppet will sometimes use these parameters to check its
  8. # own configured state, so they can be used to make Puppet a bit more self-managing.
  9. #
  10. # Generated on Wed Jun 10 13:29:46 -0400 2009.
  11. #
  12. [puppetd]
  13.     # Whether TLS should be used when searching for nodes.
  14.     # Defaults to false because TLS usually requires certificates
  15.     # to be set up on the client side.
  16.     # ldaptls = false
  17.  
  18.     # The search string used to find an LDAP node.
  19.     # The default value is '(&(objectclass=puppetClient)(cn=%s))'.
  20.     # ldapstring = (&(objectclass=puppetClient)(cn=%s))
  21.  
  22.     # The LDAP attributes to include when querying LDAP for nodes.  All
  23.     # returned attributes are set as variables in the top-level scope.
  24.     # Multiple values should be comma-separated.  The value 'all' returns
  25.     # all attributes.
  26.     # The default value is 'all'.
  27.     # ldapattrs = all
  28.  
  29.     # The password to use to connect to LDAP.
  30.     # The default value is ''.
  31.     # ldappassword =
  32.  
  33.     # Whether to search for node configurations in LDAP.  See
  34.     # http://reductivelabs.com/puppet/trac/wiki/LdapNodes/ for more information.
  35.     # ldapnodes = false
  36.  
  37.     # The LDAP server.  Only used if ``ldapnodes`` is enabled.
  38.     # The default value is 'ldap'.
  39.     # ldapserver = ldap
  40.  
  41.     # The LDAP attributes to use to define Puppet classes.  Values
  42.     # should be comma-separated.
  43.     # The default value is 'puppetclass'.
  44.     # ldapclassattrs = puppetclass
  45.  
  46.     # The attribute to use to define the parent node.
  47.     # The default value is 'parentnode'.
  48.     # ldapparentattr = parentnode
  49.  
  50.     # The search base for LDAP searches.  It's impossible to provide
  51.     # a meaningful default here, although the LDAP libraries might
  52.     # have one already set.  Generally, it should be the 'ou=Hosts'
  53.     # branch under your main directory.
  54.     # The default value is ''.
  55.     # ldapbase =
  56.  
  57.     # Whether SSL should be used when searching for nodes.
  58.     # Defaults to false because SSL usually requires certificates
  59.     # to be set up on the client side.
  60.     # ldapssl = false
  61.  
  62.     # The LDAP port.  Only used if ``ldapnodes`` is enabled.
  63.     # The default value is '389'.
  64.     # ldapport = 389
  65.  
  66.     # The LDAP attributes that should be stacked to arrays by adding
  67.     # the values in all hierarchy elements of the tree.  Values
  68.     # should be comma-separated.
  69.     # The default value is 'puppetvar'.
  70.     # ldapstackedattrs = puppetvar
  71.  
  72.     # The user to use to connect to LDAP.  Must be specified as a
  73.     # full DN.
  74.     # The default value is ''.
  75.     # ldapuser =
  76.  
  77.     # The entry-point manifest for puppetmasterd.
  78.     # The default value is '$manifestdir/site.pp'.
  79.     manifest = /etc//opt/csw/puppet/manifests/site.pp
  80.  
  81.     # Which port puppetmasterd listens on.
  82.     # The default value is '8140'.
  83.     # masterport = 8140
  84.  
  85.     # Where FileBucket files are stored.
  86.     # The default value is '$vardir/bucket'.
  87.     bucketdir = /var//opt/csw/puppet/bucket
  88.  
  89.     # The directory in which YAML data is stored, usually in a subdirectory.
  90.     # The default value is '$vardir/yaml'.
  91.     yamldir = /var//opt/csw/puppet/yaml
  92.  
  93.     # The search path for modules as a colon-separated list of
  94.     # directories.
  95.     # The default value is '$confdir/modules:/usr/share/puppet/modules'.
  96.     modulepath = /etc//opt/csw/puppet/modules:/usr/share/puppet/modules
  97.  
  98.     # Whether to store each client's configuration.  This
  99.     # requires ActiveRecord from Ruby on Rails.
  100.     # storeconfigs = false
  101.  
  102.     # Code to parse directly.  This is essentially only used
  103.     # by ``puppet``, and should only be set if you're writing your own Puppet
  104.     # executable
  105.     # The default value is ''.
  106.     # code =
  107.  
  108.     # Where puppetmasterd logs.  This is generally not used,
  109.     # since syslog is the default log destination.
  110.     # The default value is '$logdir/puppetmaster.log'.
  111.     masterlog = /var//opt/csw/puppet/log/puppetmaster.log
  112.  
  113.     # The group puppetmasterd should run as.
  114.     # The default value is 'puppet'.
  115.     # group = puppet
  116.  
  117.     # Just check the syntax of the manifests.
  118.     # parseonly = false
  119.  
  120.     # The header containing an authenticated
  121.     # client's SSL DN.  Only used with Mongrel.  This header must be set by the proxy
  122.     # to the authenticated client's SSL DN (e.g., ``/CN=puppet.reductivelabs.com``).
  123.     # See http://reductivelabs.com/puppet/trac/wiki/UsingMongrel for more information.
  124.     # The default value is 'HTTP_X_CLIENT_DN'.
  125.     # ssl_client_header = HTTP_X_CLIENT_DN
  126.  
  127.     # The directory in which client-side YAML data is stored.
  128.     # The default value is '$vardir/client_yaml'.
  129.     clientyamldir = /var//opt/csw/puppet/client_yaml
  130.  
  131.     # Wether the master should function as a certificate authority.
  132.     # The default value is 'true'.
  133.     # ca = true
  134.  
  135.     # Where the puppetmasterd web server logs.
  136.     # The default value is '$logdir/masterhttp.log'.
  137.     masterhttplog = /var//opt/csw/puppet/log/masterhttp.log
  138.  
  139.     # How the puppetmaster determines the client's identity
  140.     # and sets the 'hostname', 'fqdn' and 'domain' facts for use in the manifest,
  141.     # in particular for determining which 'node' statement applies to the client.
  142.     # Possible values are 'cert' (use the subject's CN in the client's
  143.     # certificate) and 'facter' (use the hostname that the client
  144.     # reported in its facts)
  145.     # The default value is 'cert'.
  146.     # node_name = cert
  147.  
  148.     # The user puppetmasterd should run as.
  149.     # The default value is 'puppet'.
  150.     # user = puppet
  151.  
  152.     # The header containing the status
  153.     # message of the client verification. Only used with Mongrel.  This header must be set by the proxy
  154.     # to 'SUCCESS' if the client successfully authenticated, and anything else otherwise.
  155.     # See http://reductivelabs.com/puppet/trac/wiki/UsingMongrel for more information.
  156.     # The default value is 'HTTP_X_CLIENT_VERIFY'.
  157.     # ssl_client_verify_header = HTTP_X_CLIENT_VERIFY
  158.  
  159.     # Where puppetmasterd looks for its manifests.
  160.     # The default value is '$confdir/manifests'.
  161.     manifestdir = /etc//opt/csw/puppet/manifests
  162.  
  163.     # Where Puppet should look for plugins.  Multiple directories should
  164.     # be colon-separated, like normal PATH variables.  As of 0.23.1, this
  165.     # option is deprecated; download your custom libraries to the $libdir
  166.     # instead.
  167.     # The default value is '$vardir/plugins'.
  168.     pluginpath = /var//opt/csw/puppet/plugins
  169.  
  170.     # Whether plugins should be synced with the central server.
  171.     # pluginsync = false
  172.  
  173.     # The shell search path.  Defaults to whatever is inherited
  174.     # from the parent process.
  175.     # The default value is 'none'.
  176.     # path = none
  177.  
  178.     # Where Puppet should store facts that it pulls down from the central
  179.     # server.
  180.     # The default value is '$vardir/facts'.
  181.     factdest = /var//opt/csw/puppet/facts
  182.  
  183.     # The configuration file that defines the rights to the different
  184.     # namespaces and methods.  This can be used as a coarse-grained
  185.     # authorization system for both ``puppetd`` and ``puppetmasterd``.
  186.     # The default value is '$confdir/namespaceauth.conf'.
  187.     authconfig = /etc//opt/csw/puppet/namespaceauth.conf
  188.  
  189.     # What files to ignore when pulling down facts.
  190.     # The default value is '.svn CVS'.
  191.     # factsignore = .svn CVS
  192.  
  193.     # The Puppet log directory.
  194.     # The default value is '$vardir/log'.
  195.     logdir = /var//opt/csw/puppet/log
  196.  
  197.     # Print the value of a specific configuration parameter.  If a
  198.     # parameter is provided for this, then the value is printed and puppet
  199.     # exits.  Comma-separate multiple values.  For a list of all values,
  200.     # specify 'all'.  This feature is only available in Puppet versions
  201.     # higher than 0.18.4.
  202.     # The default value is ''.
  203.     # configprint =
  204.  
  205.     # The environment Puppet is running in.  For clients
  206.     # (e.g., ``puppetd``) this determines the environment itself, which
  207.     # is used to find modules and much more.  For servers (i.e.,
  208.     # ``puppetmasterd``) this provides the default environment for nodes
  209.     # we know nothing about.
  210.     # The default value is 'production'.
  211.     # environment = production
  212.  
  213.     # The minimum time to wait (in seconds) between checking for updates in
  214.     # configuration files.  This timeout determines how quickly Puppet checks whether
  215.     # a file (such as manifests or templates) has changed on disk.
  216.     # The default value is '15'.
  217.     # filetimeout = 15
  218.  
  219.     # Where SSL certificates are kept.
  220.     # The default value is '$confdir/ssl'.
  221.     ssldir = /etc//opt/csw/puppet/ssl
  222.  
  223.     # Whether log files should always flush to disk.
  224.     # autoflush = false
  225.  
  226.     # Which arguments to pass to the diff command when printing differences between files.
  227.     # The default value is ''.
  228.     # diff_args =
  229.  
  230.     # Whether to print stack traces on some errors
  231.     # trace = false
  232.  
  233.     # The maximum allowed UID.  Some platforms use negative UIDs
  234.     # but then ship with tools that do not know how to handle signed ints, so the UIDs show up as
  235.     # huge numbers that can then not be fed back into the system.  This is a hackish way to fail in a
  236.     # slightly more useful way when that happens.
  237.     # The default value is '4294967290'.
  238.     # maximum_uid = 4294967290
  239.  
  240.     # Where Puppet should store plugins that it pulls down from the central
  241.     # server.
  242.     # The default value is '$libdir'.
  243.     plugindest = /var//opt/csw/puppet/lib
  244.  
  245.     # The name of the service, if we are running as one.  The
  246.     # default is essentially $0 without the path or ``.rb``.
  247.     # The default value is 'puppetd'.
  248.     # name = puppetd
  249.  
  250.     # What files to ignore when pulling down plugins.
  251.     # The default value is '.svn CVS'.
  252.     # pluginsignore = .svn CVS
  253.  
  254.     # From where to retrieve facts.  The standard Puppet ``file`` type
  255.     # is used for retrieval, so anything that is a valid file source can
  256.     # be used here.
  257.     # The default value is 'puppet://$server/facts'.
  258.     factsource = puppet://mypuppet.example.net/facts
  259.  
  260.     # Where Puppet stores dynamic and growing data.  The default for this parameter is calculated specially, like `confdir`_.
  261.     # The default value is '/var//opt/csw/puppet'.
  262.     # vardir = /var//opt/csw/puppet
  263.  
  264.     # Where Puppet PID files are kept.
  265.     # The default value is '$vardir/run'.
  266.     rundir = /var//opt/csw/puppet/run
  267.  
  268.     # Whether to use colors when logging to the console.
  269.     # Valid values are ``ansi`` (equivalent to ``true``), ``html`` (mostly
  270.     # used during testing with TextMate), and ``false``, which produces
  271.     # no color.
  272.     # The default value is 'ansi'.
  273.     # color = ansi
  274.  
  275.     # The main Puppet configuration directory.  The default for this parameter is calculated based on the user.  If the process
  276.     # is runnig as root or the user that ``puppetmasterd`` is supposed to run as, it defaults to a system directory, but if it's running as any other user,
  277.     # it defaults to being in ``~``.
  278.     # The default value is '/etc//opt/csw/puppet'.
  279.     # confdir = /etc//opt/csw/puppet
  280.  
  281.     # Whether matching in case statements and selectors
  282.     # should be case-sensitive.  Case insensitivity is
  283.     # handled by downcasing all values before comparison.
  284.     # casesensitive = false
  285.  
  286.     # Whether to just print a manifest to stdout and exit.  Only makes
  287.     # sense when used interactively.  Takes into account arguments specified
  288.     # on the CLI.
  289.     # genmanifest = false
  290.  
  291.     # Whether to just print a configuration to stdout and exit.  Only makes
  292.     # sense when used interactively.  Takes into account arguments specified
  293.     # on the CLI.
  294.     genconfig = true
  295.  
  296.     # Send the process into the background.  This is the default.
  297.     # The default value is 'true'.
  298.     # daemonize = true
  299.  
  300.     # Where to find information about nodes.
  301.     # The default value is 'plain'.
  302.     # node_terminus = plain
  303.  
  304.     # From where to retrieve plugins.  The standard Puppet ``file`` type
  305.     # is used for retrieval, so anything that is a valid file source can
  306.     # be used here.
  307.     # The default value is 'puppet://$server/plugins'.
  308.     pluginsource = puppet://mypuppet.example.net/plugins
  309.  
  310.     # Whether to create the necessary user and group that puppetd will
  311.     # run as.
  312.     # mkusers = false
  313.  
  314.     # Where Puppet should look for facts.  Multiple directories should
  315.     # be colon-separated, like normal PATH variables.
  316.     # The default value is '$vardir/facts'.
  317.     factpath = /var//opt/csw/puppet/facts
  318.  
  319.     # Whether facts should be synced with the central server.
  320.     # factsync = false
  321.  
  322.     # Whether to print a contextual diff when files are being replaced.  The diff
  323.     # is printed on stdout, so this option is meaningless unless you are running Puppet interactively.
  324.     # This feature currently requires the ``diff/lcs`` Ruby library.
  325.     # show_diff = false
  326.  
  327.     # What syslog facility to use when logging to
  328.     # syslog.  Syslog has a fixed list of valid facilities, and you must
  329.     # choose one of those; you cannot just make one up.
  330.     # The default value is 'daemon'.
  331.     # syslogfacility = daemon
  332.  
  333.     # An extra search path for Puppet.  This is only useful
  334.     # for those files that Puppet will load on demand, and is only
  335.     # guaranteed to work for those cases.  In fact, the autoload
  336.     # mechanism is responsible for making sure this directory
  337.     # is in Ruby's search path
  338.     # The default value is '$vardir/lib'.
  339.     libdir = /var//opt/csw/puppet/lib
  340.  
  341.     # The directory where Puppet state is stored.  Generally,
  342.     # this directory can be removed without causing harm (although it
  343.     # might result in spurious service restarts).
  344.     # The default value is '$vardir/state'.
  345.     statedir = /var//opt/csw/puppet/state
  346.  
  347.     # An external command that can produce node information.  The output
  348.     # must be a YAML dump of a hash, and that hash must have one or both of
  349.     # ``classes`` and ``parameters``, where ``classes`` is an array and
  350.     # ``parameters`` is a hash.  For unknown nodes, the commands should
  351.     # exit with a non-zero exit code.
  352.     # This command makes it straightforward to store your node mapping
  353.     # information in other data sources like databases.
  354.     # The default value is 'none'.
  355.     # external_nodes = none
  356.  
  357.     # A parameter that can be used in commit
  358.     # hooks, since it enables you to parse-check a single file rather
  359.     # than requiring that all files exist.
  360.     # ignoreimport = false
  361.  
  362.     # Which diff command to use when printing differences between files.
  363.     # The default value is 'diff'.
  364.     # diff = diff
  365.  
  366.     # The database server for Client caching. Only
  367.     # used when networked databases are used.
  368.     # The default value is 'localhost'.
  369.     # dbserver = localhost
  370.  
  371.     # The database socket location. Only used when networked
  372.     # databases are used.  Will be ignored if the value is an empty string.
  373.     # The default value is ''.
  374.     # dbsocket =
  375.  
  376.     # Whether to automatically migrate the database.
  377.     # dbmigrate = false
  378.  
  379.     # The database user for Client caching. Only
  380.     # used when networked databases are used.
  381.     # The default value is 'puppet'.
  382.     # dbuser = puppet
  383.  
  384.     # Where Rails-specific logs are sent
  385.     # The default value is '$logdir/rails.log'.
  386.     railslog = /var//opt/csw/puppet/log/rails.log
  387.  
  388.     # The database cache for client configurations.  Used for
  389.     # querying within the language.
  390.     # The default value is '$statedir/clientconfigs.sqlite3'.
  391.     dblocation = /var//opt/csw/puppet/state/clientconfigs.sqlite3
  392.  
  393.     # The name of the database to use.
  394.     # The default value is 'puppet'.
  395.     # dbname = puppet
  396.  
  397.     # The database password for Client caching. Only
  398.     # used when networked databases are used.
  399.     # The default value is 'puppet'.
  400.     # dbpassword = puppet
  401.  
  402.     # The log level for Rails connections.  The value must be
  403.     # a valid log level within Rails.  Production environments normally use ``info``
  404.     # and other environments normally use ``debug``.
  405.     # The default value is 'info'.
  406.     # rails_loglevel = info
  407.  
  408.     # The type of database to use.
  409.     # The default value is 'sqlite3'.
  410.     # dbadapter = sqlite3
  411.  
  412.     # What format to use to dump the catalog.  Only supports
  413.     # 'marshal' and 'yaml'.  Only matters on the client, since it asks the server
  414.     # for a specific format.
  415.     # The default value is 'yaml'.
  416.     # catalog_format = yaml
  417.  
  418.     # How often puppetd applies the client configuration; in seconds.
  419.     # The default value is '1800'.
  420.     runinterval = 60
  421.  
  422.     # Where puppetd caches the local configuration.  An
  423.     # extension indicating the cache format is added automatically.
  424.     # The default value is '$statedir/localconfig'.
  425.     localconfig = /var//opt/csw/puppet/state/localconfig
  426.  
  427.     # Whether to use the cached configuration when the remote
  428.     # configuration will not compile.  This option is useful for testing
  429.     # new configurations, where you want to fix the broken configuration
  430.     # rather than reverting to a known-good one.
  431.     # The default value is 'true'.
  432.     # usecacheonfailure = true
  433.  
  434.     # The log file for puppetd.  This is generally not used.
  435.     # The default value is '$logdir/puppetd.log'.
  436.     puppetdlog = /var//opt/csw/puppet/log/puppetd.log
  437.  
  438.     # Which port puppetd listens on.
  439.     # The default value is '8139'.
  440.     # puppetport = 8139
  441.  
  442.     # Facts that are dynamic; these facts will be ignored when deciding whether
  443.     # changed facts should result in a recompile.  Multiple facts should be
  444.     # comma-separated.
  445.     # The default value is 'memorysize,memoryfree,swapsize,swapfree'.
  446.     # dynamicfacts = memorysize,memoryfree,swapsize,swapfree
  447.  
  448.     # The type of server to use.  Currently supported
  449.     # options are webrick and mongrel.  If you use mongrel, you will need
  450.     # a proxy in front of the process or processes, since Mongrel cannot
  451.     # speak SSL.
  452.     # The default value is 'webrick'.
  453.     # servertype = webrick
  454.  
  455.     # The HTTP proxy port to use for outgoing connections
  456.     # The default value is '3128'.
  457.     # http_proxy_port = 3128
  458.  
  459.     # How long the client should wait for the configuration to be retrieved
  460.     # before considering it a failure.  This can help reduce flapping if too
  461.     # many clients contact the server at one time.
  462.     # The default value is '120'.
  463.     # configtimeout = 120
  464.  
  465.     # The server to use for certificate
  466.     # authority requests.  It's a separate server because it cannot
  467.     # and does not need to horizontally scale.
  468.     # The default value is '$server'.
  469.     ca_server = mypuppet.example.net
  470.  
  471.     # Whether to send reports after every transaction.
  472.     # report = false
  473.  
  474.     # Whether puppetd should be run in noop mode.
  475.     # noop = false
  476.  
  477.     # Where puppetd and puppetmasterd store state associated
  478.     # with the running configuration.  In the case of puppetmasterd,
  479.     # this file reflects the state discovered through interacting
  480.     # with clients.
  481.     # The default value is '$statedir/state.yaml'.
  482.     statefile = /var//opt/csw/puppet/state/state.yaml
  483.  
  484.     # Ignore cache and always recompile the configuration.  This is
  485.     # useful for testing new configurations, where the local cache may in
  486.     # fact be stale even if the timestamps are up to date - if the facts
  487.     # change or if the server changes.
  488.     # ignorecache = false
  489.  
  490.     # The pid file
  491.     # The default value is ''.
  492.     # pidfile =
  493.  
  494.     # The server to which server puppetd should connect
  495.     # The default value is 'puppet'.
  496.     server = mypuppet.example.net
  497.  
  498.     # Where the puppetd web server logs.
  499.     # The default value is '$logdir/http.log'.
  500.     httplog = /var//opt/csw/puppet/log/http.log
  501.  
  502.     # The maximum time to delay before runs.  Defaults to being the same as the
  503.     # run interval.
  504.     # The default value is '$runinterval'.
  505.     splaylimit = 60
  506.  
  507.     # The configuration file for puppetd.
  508.     # The default value is '$confdir/puppet.conf'.
  509.     config = /etc//opt/csw/puppet/puppet.conf
  510.  
  511.     # Boolean; wheter or not puppetd should validate the server
  512.     # SSL certificate against the request hostname.
  513.     # The default value is 'true'.
  514.     # http_enable_post_connection_check = true
  515.  
  516.     # The server to which to send transaction reports.
  517.     # The default value is '$server'.
  518.     reportserver = mypuppet.example.net
  519.  
  520.     # The port to use for the certificate authority.
  521.     # The default value is '$masterport'.
  522.     ca_port = 8140
  523.  
  524.     # Whether puppetd should listen for
  525.     # connections.  If this is true, then by default only the
  526.     # ``runner`` server is started, which allows remote authorized
  527.     # and authenticated nodes to connect and trigger ``puppetd``
  528.     # runs.
  529.     # listen = false
  530.  
  531.     # A lock file to temporarily stop puppetd from doing anything.
  532.     # The default value is '$statedir/puppetdlock'.
  533.     puppetdlockfile = /var//opt/csw/puppet/state/puppetdlock
  534.  
  535.     # The file in which puppetd stores a list of the classes
  536.     # associated with the retrieved configuration.  Can be loaded in
  537.     # the separate ``puppet`` executable using the ``--loadclasses``
  538.     # option.
  539.     # The default value is '$statedir/classes.txt'.
  540.     classfile = /var//opt/csw/puppet/state/classes.txt
  541.  
  542.     # Whether facts should be made all lowercase when sent to the server.
  543.     # downcasefacts = false
  544.  
  545.     # The address to bind to.  Mongrel servers
  546.     # default to 127.0.0.1 and WEBrick defaults to 0.0.0.0.
  547.     # The default value is ''.
  548.     # bindaddress =
  549.  
  550.     # The HTTP proxy host to use for outgoing connections.  Note: You
  551.     # may need to use a FQDN for the server hostname when using a proxy.
  552.     # The default value is 'none'.
  553.     # http_proxy_host = none
  554.  
  555.     # Whether to sleep for a pseudo-random (but consistent) amount of time before
  556.     # a run.
  557.     # splay = false
  558.  
  559.     # Boolean; whether puppetd should ignore schedules.  This is useful
  560.     # for initial puppetd runs.
  561.     # ignoreschedules = false
  562.  
  563.     # Where the CA stores signed certificates.
  564.     # The default value is '$cadir/signed'.
  565.     signeddir = /etc//opt/csw/puppet/ssl/ca/signed
  566.  
  567.     # Whether to enable autosign.  Valid values are true (which
  568.     # autosigns any key request, and is a very bad idea), false (which
  569.     # never autosigns any key request), and the path to a file, which
  570.     # uses that configuration file to determine which keys to sign.
  571.     # The default value is '$confdir/autosign.conf'.
  572.     autosign = /etc//opt/csw/puppet/autosign.conf
  573.  
  574.     # The type of hash used in certificates.
  575.     # The default value is 'md5'.
  576.     # ca_md = md5
  577.  
  578.     # A Complete listing of all certificates
  579.     # The default value is '$cadir/inventory.txt'.
  580.     cert_inventory = /etc//opt/csw/puppet/ssl/ca/inventory.txt
  581.  
  582.     # The CA certificate.
  583.     # The default value is '$cadir/ca_crt.pem'.
  584.     cacert = /etc//opt/csw/puppet/ssl/ca/ca_crt.pem
  585.  
  586.     # Where the CA stores private certificate information.
  587.     # The default value is '$cadir/private'.
  588.     caprivatedir = /etc//opt/csw/puppet/ssl/ca/private
  589.  
  590.     # Where the CA stores the password for the private key
  591.     # The default value is '$caprivatedir/ca.pass'.
  592.     capass = /etc//opt/csw/puppet/ssl/ca/private/ca.pass
  593.  
  594.     # How long a certificate should be valid.
  595.     # This parameter is deprecated, use ca_ttl instead
  596.     # The default value is ''.
  597.     # ca_days =
  598.  
  599.     # The bit length of the certificates.
  600.     # The default value is '2048'.
  601.     # req_bits = 2048
  602.  
  603.     # The CA private key.
  604.     # The default value is '$cadir/ca_key.pem'.
  605.     cakey = /etc//opt/csw/puppet/ssl/ca/ca_key.pem
  606.  
  607.     # Where the CA stores certificate requests
  608.     # The default value is '$cadir/requests'.
  609.     csrdir = /etc//opt/csw/puppet/ssl/ca/requests
  610.  
  611.     # Where the serial number for certificates is stored.
  612.     # The default value is '$cadir/serial'.
  613.     serial = /etc//opt/csw/puppet/ssl/ca/serial
  614.  
  615.     # The default TTL for new certificates; valid values
  616.     # must be an integer, optionally followed by one of the units
  617.     # 'y' (years of 365 days), 'd' (days), 'h' (hours), or
  618.     # 's' (seconds). The unit defaults to seconds. If this parameter
  619.     # is set, ca_days is ignored. Examples are '3600' (one hour)
  620.     # and '1825d', which is the same as '5y' (5 years)
  621.     # The default value is '5y'.
  622.     # ca_ttl = 5y
  623.  
  624.     # The certificate revocation list (CRL) for the CA. Set this to 'false' if you do not want to use a CRL.
  625.     # The default value is '$cadir/ca_crl.pem'.
  626.     cacrl = /etc//opt/csw/puppet/ssl/ca/ca_crl.pem
  627.  
  628.     # The bit length of keys.
  629.     # The default value is '1024'.
  630.     # keylength = 1024
  631.  
  632.     # The root directory for the certificate authority.
  633.     # The default value is '$ssldir/ca'.
  634.     cadir = /etc//opt/csw/puppet/ssl/ca
  635.  
  636.     # The CA public key.
  637.     # The default value is '$cadir/ca_pub.pem'.
  638.     capub = /etc//opt/csw/puppet/ssl/ca/ca_pub.pem
  639.  
  640.     # The certificate directory.
  641.     # The default value is '$ssldir/certs'.
  642.     certdir = /etc//opt/csw/puppet/ssl/certs
  643.  
  644.     # Where the client stores private certificate information.
  645.     # The default value is '$ssldir/private'.
  646.     privatedir = /etc//opt/csw/puppet/ssl/private
  647.  
  648.     # Where individual hosts store and look for their certificates.
  649.     # The default value is '$certdir/$certname.pem'.
  650.     hostcert = /etc//opt/csw/puppet/ssl/certs/puppet-test.example.net.pem
  651.  
  652.     # Where each client stores the CA certificate.
  653.     # The default value is '$certdir/ca.pem'.
  654.     localcacert = /etc//opt/csw/puppet/ssl/certs/ca.pem
  655.  
  656.     # The name to use when handling certificates.  Defaults
  657.     # to the fully qualified domain name.
  658.     # The default value is 'puppet-test.example.net'.
  659.     # certname = puppet-test.example.net
  660.  
  661.     # The public key directory.
  662.     # The default value is '$ssldir/public_keys'.
  663.     publickeydir = /etc//opt/csw/puppet/ssl/public_keys
  664.  
  665.     # Where puppetd stores the password for its private key.
  666.     # Generally unused.
  667.     # The default value is '$privatedir/password'.
  668.     passfile = /etc//opt/csw/puppet/ssl/private/password
  669.  
  670.     # Where individual hosts store and look for their private key.
  671.     # The default value is '$privatekeydir/$certname.pem'.
  672.     hostprivkey = /etc//opt/csw/puppet/ssl/private_keys/puppet-test.example.net.pem
  673.  
  674.     # The DNS names on the Server certificate as a colon-separated list.
  675.     # If it's anything other than an empty string, it will be used as an alias in the created
  676.     # certificate.  By default, only the server gets an alias set up, and only for 'puppet'.
  677.     # The default value is ''.
  678.     # certdnsnames =
  679.  
  680.     # The private key directory.
  681.     # The default value is '$ssldir/private_keys'.
  682.     privatekeydir = /etc//opt/csw/puppet/ssl/private_keys
  683.  
  684.     # Where individual hosts store and look for their certificates.
  685.     # The default value is '$ssldir/csr_$certname.pem'.
  686.     hostcsr = /etc//opt/csw/puppet/ssl/csr_puppet-test.example.net.pem
  687.  
  688.     # Where individual hosts store and look for their public key.
  689.     # The default value is '$publickeydir/$certname.pem'.
  690.     hostpubkey = /etc//opt/csw/puppet/ssl/public_keys/puppet-test.example.net.pem
  691.  
  692.     # The list of reports to generate.  All reports are looked for
  693.     # in puppet/reports/<name>.rb, and multiple report names should be
  694.     # comma-separated (whitespace is okay).
  695.     # The default value is 'store'.
  696.     # reports = store
  697.  
  698.     # The directory in which to store reports
  699.     # received from the client.  Each client gets a separate
  700.     # subdirectory.
  701.     # The default value is '$vardir/reports'.
  702.     reportdir = /var//opt/csw/puppet/reports
  703.  
  704.     # Whether each resource should log when it is
  705.     # being evaluated.  This allows you to interactively see exactly
  706.     # what is being done.
  707.     # evaltrace = false
  708.  
  709.     # Tags to use to find resources.  If this is set, then
  710.     # only resources tagged with the specified tags will be applied.
  711.     # Values must be comma-separated.
  712.     # The default value is ''.
  713.     # tags =
  714.  
  715.     # Whether to print a transaction summary.
  716.     # summarize = false
  717.  
  718.     # Where Puppet looks for template files.  Can be a list of colon-seperated
  719.     # directories.
  720.     # The default value is '$vardir/templates'.
  721.     templatedir = /var//opt/csw/puppet/templates
  722.  
  723.     # Whether to validate parameters during parsing.
  724.     # The default value is 'true'.
  725.     # paramcheck = true
  726.  
  727.     # Whether to use lexical scoping (vs. dynamic).
  728.     # lexical = false
  729.  
  730.     # Whether to validate types during parsing.
  731.     # The default value is 'true'.
  732.     # typecheck = true
  733.  
  734.     # Where to find the sendmail binary with which to send email.
  735.     # The default value is '/usr/sbin/sendmail'.
  736.     # sendmail = /usr/sbin/sendmail
  737.  
  738.     # The 'from' email address for the reports.
  739.     # The default value is 'report@puppet-test.example.net'.
  740.     # reportfrom = report@puppet-test.example.net
  741.  
  742.     # The mapping between reporting tags and email addresses.
  743.     # The default value is '$confdir/tagmail.conf'.
  744.     tagmap = /etc//opt/csw/puppet/tagmail.conf
  745.  
  746.     # The server through which to send email reports.
  747.     # The default value is 'none'.
  748.     # smtpserver = none
  749.  
  750.     # Whether RRD information should be graphed.
  751.     # rrdgraph = false
  752.  
  753.     # How often RRD should expect data.
  754.     # This should match how often the hosts report back to the server.
  755.     # The default value is '$runinterval'.
  756.     rrdinterval = 60
  757.  
  758.     # The directory where RRD database files are stored.
  759.     # Directories for each reporting host will be created under
  760.     # this directory.
  761.     # The default value is '$vardir/rrd'.
  762.     rrddir = /var//opt/csw/puppet/rrd
  763.  
  764.     # Where the fileserver configuration is stored.
  765.     # The default value is '$confdir/fileserver.conf'.
  766.     fileserverconfig = /etc//opt/csw/puppet/fileserver.conf
  767.  
  768.     # Whether to create dot graph files for the different
  769.     # configuration graphs.  These dot files can be interpreted by tools
  770.     # like OmniGraffle or dot (which is part of ImageMagick).
  771.     # graph = false
  772.  
  773.     # Where to store dot-outputted graphs.
  774.     # The default value is '$statedir/graphs'.
  775.     graphdir = /var//opt/csw/puppet/state/graphs
  776.  
  777.     # Where FileBucket files are stored locally.
  778.     # The default value is '$vardir/clientbucket'.
  779.     clientbucketdir = /var//opt/csw/puppet/clientbucket