salt-key issue Duplicate key

Issue 1
duplicate minion_id	more /etc/salt/minion_id >> change the minion_id : example branch2_node1
	[root@conductor t128]# t128-salt-key Accepted Keys: 6ae7b114-a8a2-458b-aee3-05e30d2664e3 conductor ssrdc1_node1 Denied Keys: Unaccepted Keys: branch1_node1 <<<<<<<<<<< This is the mistake Rejected Keys: [root@conductor t128]# After changing the minion_id: [root@conductor t128]# t128-salt-key Accepted Keys: 6ae7b114-a8a2-458b-aee3-05e30d2664e3 conductor ssrdc1_node1 Denied Keys: Unaccepted Keys: branch1_node1 branch2_node1 <<<<<<<<<<< New one !!!! Rejected Keys: [root@conductor t128]#
Issue 2
conductor	does not see the branch salt-minion key
	ping the conductor / curl IP@ -k stop the branch 128T process

	serial number = mac address Expand source [root@branch1_node1 t128]# lshw -c network \| more *-network:0 description: Ethernet interface product: 82540EM Gigabit Ethernet Controller vendor: Intel Corporation physical id: 12 bus info: pci@0000:00:12.0 logical name: ens18 version: 03 serial: 4a:e1:dc:d1:a7:69 <<<<<<<<<<<<<<<<<<<<<< Mac address is the S/N size: 1Gbit/s capacity: 1Gbit/s width: 32 bits clock: 33MHz capabilities: bus_master rom ethernet physical tp 10bt 10bt-fd 100bt 100bt-fd 1000bt-fd autonegotiation configuration: autonegotiation=on broadcast=yes driver=e1000 driverversion=7.3.21-k8-NAPI duplex=full ip=192.168.0. 215 latency=0 link=yes multicast=yes port=twisted pair speed=1Gbit/s resources: irq:11 memory:feb00000-feb1ffff ioport:e080(size=64) memory:fea00000-fea3ffff >>>>>>> ether 4a:e1:dc:d1:a7:69 [root@branch1_node1 t128]# ip add show ens18 8: ens18: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 link/ether 4a:e1:dc:d1:a7:69 brd ff:ff:ff:ff:ff:ff inet 192.168.0.215/24 brd 192.168.0.255 scope global noprefixroute dynamic ens18 valid_lft 78856sec preferred_lft 78856sec inet6 fe80::1c38:afa9:6b87:dc86/64 scope link noprefixroute valid_lft forever preferred_lft forever

salt-key	on the conductor
on the conductor	t128-salt-key t128-salt-key [root@conductor t128]# t128-salt-key Accepted Keys: conductor routerdc5_id <<<<<< this one, created manually Denied Keys: Unaccepted Keys: Rejected Keys: [root@conductor t128]# [root@conductor t128]# t128-salt-key Accepted Keys: conductor Denied Keys: Unaccepted Keys: 6ae7b114-a8a2-458b-aee3-05e30d2664e3 <<<<<< created automatically Rejected Keys:
delete a key
	delete key [root@conductor t128]# t128-salt-key Accepted Keys: 049b570d-74a8-4ada-809b-1102f666f987 157d4b0f-7c6b-401a-8360-e73535a6778d branch1_node1 conductor eb6eaea4-d7b7-4ac9-9d3e-52f1caf1b3b1 node1_jlk_HQs ssrdc1_node1 Denied Keys: Unaccepted Keys: b9e19200-95b2-4081-b067-3fba94535c32 Rejected Keys: [root@conductor t128]# t128-salt-key -d b9e19200-95b2-4081-b067-3fba94535c32 The following keys are going to be deleted: Unaccepted Keys: b9e19200-95b2-4081-b067-3fba94535c32 Proceed? [N/y] y Key for minion b9e19200-95b2-4081-b067-3fba94535c32 deleted. [root@conductor t128]# t128-salt-key Accepted Keys: 049b570d-74a8-4ada-809b-1102f666f987 157d4b0f-7c6b-401a-8360-e73535a6778d branch1_node1 conductor eb6eaea4-d7b7-4ac9-9d3e-52f1caf1b3b1 node1_jlk_HQs ssrdc1_node1 Denied Keys: Unaccepted Keys: Rejected Keys: [root@conductor t128]#

	1- restart the 128T.service on the router 2- on the Conductor under the Router > Node select the

Juniper Security

salt-key issue Duplicate key

Analytics

Related content