puppet.conf

# The configuration file for puppet.  Note that this file
# is likely to have unused configuration parameters in it; any parameter that's
# valid anywhere in Puppet can be in any config file, even if it's not used.
# 
# Every section can specify three special parameters: owner, group, and mode.
# These parameters affect the required permissions of any files specified after
# their specification.  Puppet will sometimes use these parameters to check its
# own configured state, so they can be used to make Puppet a bit more self-managing.
# 
# Generated on Thu Jul 29 17:02:25 -0400 2010.
# 
[puppet]
    # Whether to store each client's configuration.  This
    # requires ActiveRecord from Ruby on Rails.
    # storeconfigs = false

    # How the puppetmaster determines the client's identity
    # and sets the 'hostname', 'fqdn' and 'domain' facts for use in the manifest,
    # in particular for determining which 'node' statement applies to the client.
    # Possible values are 'cert' (use the subject's CN in the client's
    # certificate) and 'facter' (use the hostname that the client
    # reported in its facts)
    # The default value is 'cert'.
    # node_name = cert

    # The header containing an authenticated
    # client's SSL DN.  Only used with Mongrel.  This header must be set by the proxy
    # to the authenticated client's SSL DN (e.g., ``/CN=puppet.puppetlabs.com``).
    # See http://puppetlabs.com/puppet/trac/wiki/UsingMongrel for more information.
    # The default value is 'HTTP_X_CLIENT_DN'.
    # ssl_client_header = HTTP_X_CLIENT_DN

    # Just check the syntax of the manifests.
    # parseonly = false

    # The list of reports to generate.  All reports are looked for
    # in puppet/reports/<name>.rb, and multiple report names should be
    # comma-separated (whitespace is okay).
    # The default value is 'store'.
    # reports = store

    # The directory where RRD database files are stored.
    # Directories for each reporting host will be created under
    # this directory.
    # The default value is '$vardir/rrd'.
    rrddir = /home/pburkholder/.puppet/var/rrd

    # Where the puppetmasterd web server logs.
    # The default value is '$logdir/masterhttp.log'.
    masterhttplog = /home/pburkholder/.puppet/var/log/masterhttp.log

    # The entry-point manifest for puppetmasterd.
    # The default value is '$manifestdir/site.pp'.
    manifest = /home/pburkholder/.puppet/manifests/site.pp

    # Where FileBucket files are stored.
    # The default value is '$vardir/bucket'.
    bucketdir = /home/pburkholder/.puppet/var/bucket

    # The header containing the status
    # message of the client verification. Only used with Mongrel.  This header must be set by the proxy
    # to 'SUCCESS' if the client successfully authenticated, and anything else otherwise.
    # See http://puppetlabs.com/puppet/trac/wiki/UsingMongrel for more information.
    # The default value is 'HTTP_X_CLIENT_VERIFY'.
    # ssl_client_verify_header = HTTP_X_CLIENT_VERIFY

    # The directory in which to store reports
    # received from the client.  Each client gets a separate
    # subdirectory.
    # The default value is '$vardir/reports'.
    reportdir = /home/pburkholder/.puppet/var/reports

    # How often RRD should expect data.
    # This should match how often the hosts report back to the server.
    # The default value is '$runinterval'.
    rrdinterval = 1800

    # Where puppetmasterd looks for its manifests.
    # The default value is '$confdir/manifests'.
    manifestdir = /home/pburkholder/.puppet/manifests

    # Which port puppetmasterd listens on.
    # The default value is '8140'.
    # masterport = 8140

    # The group puppetmasterd should run as.
    # The default value is 'puppet'.
    # group = puppet

    # The configuration file that defines the rights to the different
    # rest indirections.  This can be used as a fine-grained
    # authorization system for ``puppetmasterd``.
    # The default value is '$confdir/auth.conf'.
    rest_authconfig = /home/pburkholder/.puppet/auth.conf

    # The directory in which YAML data is stored, usually in a subdirectory.
    # The default value is '$vardir/yaml'.
    yamldir = /home/pburkholder/.puppet/var/yaml

    # Where the fileserver configuration is stored.
    # The default value is '$confdir/fileserver.conf'.
    fileserverconfig = /home/pburkholder/.puppet/fileserver.conf

    # The search path for modules as a colon-separated list of
    # directories.
    # The default value is '$confdir/modules:/usr/share/puppet/modules'.
    modulepath = /home/pburkholder/.puppet/modules:/usr/share/puppet/modules:/home/pburkholder/Projects/configuration_files/puppet/poc/modules

    # The user puppetmasterd should run as.
    # The default value is 'puppet'.
    # user = puppet

    # Whether to only search for the complete
    # hostname as it is in the certificate when searching for node information
    # in the catalogs.
    # strict_hostname_checking = false

    # Wether the master should function as a certificate authority.
    # The default value is 'true'.
    # ca = true

    # Code to parse directly.  This is essentially only used
    # by ``puppet``, and should only be set if you're writing your own Puppet
    # executable
    # The default value is ''.
    # code = 

    # Where puppetmasterd logs.  This is generally not used,
    # since syslog is the default log destination.
    # The default value is '$logdir/puppetmaster.log'.
    masterlog = /home/pburkholder/.puppet/var/log/puppetmaster.log

    # The database cache for client configurations.  Used for
    # querying within the language.
    # The default value is '$statedir/clientconfigs.sqlite3'.
    dblocation = /home/pburkholder/.puppet/var/state/clientconfigs.sqlite3

    # The name of the database to use.
    # The default value is 'puppet'.
    # dbname = puppet

    # The database password for caching. Only
    # used when networked databases are used.
    # The default value is 'puppet'.
    # dbpassword = puppet

    # The log level for Rails connections.  The value must be
    # a valid log level within Rails.  Production environments normally use ``info``
    # and other environments normally use ``debug``.
    # The default value is 'info'.
    # rails_loglevel = info

    # The type of database to use.
    # The default value is 'sqlite3'.
    # dbadapter = sqlite3

    # The database server for caching. Only
    # used when networked databases are used.
    # The default value is 'localhost'.
    # dbserver = localhost

    # The database socket location. Only used when networked
    # databases are used.  Will be ignored if the value is an empty string.
    # The default value is ''.
    # dbsocket = 

    # Whether to automatically migrate the database.
    # dbmigrate = false

    # The database user for caching. Only
    # used when networked databases are used.
    # The default value is 'puppet'.
    # dbuser = puppet

    # Where Rails-specific logs are sent
    # The default value is '$logdir/rails.log'.
    railslog = /home/pburkholder/.puppet/var/log/rails.log

    # Where to get node catalogs.  This is useful to change if, for instance,
    # you'd like to pre-compile catalogs and store them in memcached or some other easily-accessed store.
    # The default value is 'compiler'.
    # catalog_terminus = compiler

    # Where host certificate requests are stored.
    # The default value is '$ssldir/certificate_requests'.
    requestdir = /home/pburkholder/.puppet/ssl/certificate_requests

    # The HTTP proxy port to use for outgoing connections
    # The default value is '3128'.
    # http_proxy_port = 3128

    # From where to retrieve plugins.  The standard Puppet ``file`` type
    # is used for retrieval, so anything that is a valid file source can
    # be used here.
    # The default value is 'puppet://$server/plugins'.
    pluginsource = puppet://puppet/plugins

    # Where puppetd stores the password for its private key.
    # Generally unused.
    # The default value is '$privatedir/password'.
    passfile = /home/pburkholder/.puppet/ssl/private/password

    # Whether to use a queueing system to provide asynchronous database integration.
    # Requires that ``puppetqd`` be running and that 'PSON' support for ruby be installed.
    # async_storeconfigs = false

    # Where Puppet should look for facts.  Multiple directories should
    # be colon-separated, like normal PATH variables.
    # The default value is '$vardir/lib/facter/:$vardir/facts'.
    factpath = /home/pburkholder/.puppet/var/lib/facter/:/home/pburkholder/.puppet/var/facts

    # Where individual hosts store and look for their private key.
    # The default value is '$privatekeydir/$certname.pem'.
    hostprivkey = /home/pburkholder/.puppet/ssl/private_keys/camel.aarp.org.pem

    # What syslog facility to use when logging to
    # syslog.  Syslog has a fixed list of valid facilities, and you must
    # choose one of those; you cannot just make one up.
    # The default value is 'daemon'.
    # syslogfacility = daemon

    # Where Puppet stores dynamic and growing data.  The default for this parameter is calculated specially, like `confdir`_.
    # The default value is '/home/pburkholder/.puppet/var'.
    # vardir = /home/pburkholder/.puppet/var

    # Whether to just print a manifest to stdout and exit.  Only makes
    # sense when used interactively.  Takes into account arguments specified
    # on the CLI.
    # genmanifest = false

    # Boolean; wether storeconfigs store in the database only the facts and exported resources.
    # If true, then storeconfigs performance will be higher and still allow exported/collected
    # resources, but other usage external to Puppet might not work
    # thin_storeconfigs = false

    # Whether facts should be synced with the central server.
    # factsync = false

    # Where the host's certificate revocation list can be found.
    # This is distinct from the certificate authority's CRL.
    # The default value is '$ssldir/crl.pem'.
    hostcrl = /home/pburkholder/.puppet/ssl/crl.pem

    # Where Puppet PID files are kept.
    # The default value is '$vardir/run'.
    rundir = /home/pburkholder/.puppet/var/run

    # A command to run before every agent run.  If this command returns a non-zero
    # return code, the entire Puppet run will fail.
    # The default value is ''.
    # prerun_command = 

    # Which diff command to use when printing differences between files.
    # The default value is 'diff'.
    # diff = diff

    # A parameter that can be used in commit
    # hooks, since it enables you to parse-check a single file rather
    # than requiring that all files exist.
    # ignoreimport = false

    # An external command that can produce node information.  The output
    # must be a YAML dump of a hash, and that hash must have one or both of
    # ``classes`` and ``parameters``, where ``classes`` is an array and
    # ``parameters`` is a hash.  For unknown nodes, the commands should
    # exit with a non-zero exit code.
    # This command makes it straightforward to store your node mapping
    # information in other data sources like databases.
    # The default value is 'none'.
    # external_nodes = none

    # Print the value of a specific configuration parameter.  If a
    # parameter is provided for this, then the value is printed and puppet
    # exits.  Comma-separate multiple values.  For a list of all values,
    # specify 'all'.  This feature is only available in Puppet versions
    # higher than 0.18.4.
    # The default value is ''.
    # configprint = 

    # Send the process into the background.  This is the default.
    # The default value is 'true'.
    # daemonize = true

    # The name of the service, if we are running as one.  The
    # default is essentially $0 without the path or ``.rb``.
    # The default value is 'puppet'.
    # name = puppet

    # Where SSL certificates are kept.
    # The default value is '$confdir/ssl'.
    ssldir = /home/pburkholder/.puppet/ssl

    # Where the puppetd web server logs.
    # The default value is '$logdir/http.log'.
    httplog = /home/pburkholder/.puppet/var/log/http.log

    # Whether to print a contextual diff when files are being replaced.  The diff
    # is printed on stdout, so this option is meaningless unless you are running Puppet interactively.
    # This feature currently requires the ``diff/lcs`` Ruby library.
    # show_diff = false

    # The private key directory.
    # The default value is '$ssldir/private_keys'.
    privatekeydir = /home/pburkholder/.puppet/ssl/private_keys

    # Whether to create the necessary user and group that puppetd will
    # run as.
    # mkusers = false

    # Which type of queue to use for asynchronous processing.
    # The default value is 'stomp'.
    # queue_type = stomp

    # Whether plugins should be synced with the central server.
    # pluginsync = false

    # Where individual hosts store and look for their certificate requests.
    # The default value is '$ssldir/csr_$certname.pem'.
    hostcsr = /home/pburkholder/.puppet/ssl/csr_camel.aarp.org.pem

    # Where Puppet should store facts that it pulls down from the central
    # server.
    # The default value is '$vardir/facts/'.
    factdest = /home/pburkholder/.puppet/var/facts/

    # Where individual hosts store and look for their public key.
    # The default value is '$publickeydir/$certname.pem'.
    hostpubkey = /home/pburkholder/.puppet/ssl/public_keys/camel.aarp.org.pem

    # How to determine the configuration version.  By default, it will be the
    # time that the configuration is parsed, but you can provide a shell script to override how the
    # version is determined.  The output of this script will be added to every log message in the
    # reports, allowing you to correlate changes on your hosts to the source version on the server.
    # The default value is ''.
    # config_version = 

    # Whether to use colors when logging to the console.
    # Valid values are ``ansi`` (equivalent to ``true``), ``html`` (mostly
    # used during testing with TextMate), and ``false``, which produces
    # no color.
    # The default value is 'ansi'.
    # color = ansi

    # The name to use when handling certificates.  Defaults
    # to the fully qualified domain name.
    # The default value is 'camel.aarp.org'.
    # certname = camel.aarp.org

    # What files to ignore when pulling down facts.
    # The default value is '.svn CVS'.
    # factsignore = .svn CVS

    # Whether certificate revocation should be supported by downloading a Certificate Revocation List (CRL)
    # to all clients.  If enabled, CA chaining will almost definitely not work.
    # The default value is 'true'.
    # certificate_revocation = true

    # The directory where Puppet state is stored.  Generally,
    # this directory can be removed without causing harm (although it
    # might result in spurious service restarts).
    # The default value is '$vardir/state'.
    statedir = /home/pburkholder/.puppet/var/state

    # Whether log files should always flush to disk.
    # autoflush = false

    # A command to run after every agent run.  If this command returns a non-zero
    # return code, the entire Puppet run will be considered to have failed, even though it might have
    # performed work during the normal run.
    # The default value is ''.
    # postrun_command = 

    # The configuration file that defines the rights to the different
    # namespaces and methods.  This can be used as a coarse-grained
    # authorization system for both ``puppetd`` and ``puppetmasterd``.
    # The default value is '$confdir/namespaceauth.conf'.
    authconfig = /home/pburkholder/.puppet/namespaceauth.conf

    # The DNS names on the Server certificate as a colon-separated list.
    # If it's anything other than an empty string, it will be used as an alias in the created
    # certificate.  By default, only the server gets an alias set up, and only for 'puppet'.
    # The default value is ''.
    # certdnsnames = 

    # The maximum allowed UID.  Some platforms use negative UIDs
    # but then ship with tools that do not know how to handle signed ints, so the UIDs show up as
    # huge numbers that can then not be fed back into the system.  This is a hackish way to fail in a
    # slightly more useful way when that happens.
    # The default value is '4294967290'.
    # maximum_uid = 4294967290

    # Where to find information about nodes.
    # The default value is 'plain'.
    # node_terminus = plain

    # Whether to just print a configuration to stdout and exit.  Only makes
    # sense when used interactively.  Takes into account arguments specified
    # on the CLI.
    # genconfig = true

    # The public key directory.
    # The default value is '$ssldir/public_keys'.
    publickeydir = /home/pburkholder/.puppet/ssl/public_keys

    # The HTTP proxy host to use for outgoing connections.  Note: You
    # may need to use a FQDN for the server hostname when using a proxy.
    # The default value is 'none'.
    # http_proxy_host = none

    # Where Puppet should store plugins that it pulls down from the central
    # server.
    # The default value is '$libdir'.
    plugindest = /home/pburkholder/.puppet/var/lib

    # The shell search path.  Defaults to whatever is inherited
    # from the parent process.
    # The default value is 'none'.
    # path = none

    # Where the client stores private certificate information.
    # The default value is '$ssldir/private'.
    privatedir = /home/pburkholder/.puppet/ssl/private

    # Which type of queue to use for asynchronous processing.  If your stomp server requires
    # authentication, you can include it in the URI as long as your stomp client library is at least 1.1.1
    # The default value is 'stomp://localhost:61613/'.
    # queue_source = stomp://localhost:61613/

    # The environment Puppet is running in.  For clients
    # (e.g., ``puppetd``) this determines the environment itself, which
    # is used to find modules and much more.  For servers (i.e.,
    # ``puppetmasterd``) this provides the default environment for nodes
    # we know nothing about.
    # The default value is 'production'.
    # environment = production

    # What files to ignore when pulling down plugins.
    # The default value is '.svn CVS .git'.
    # pluginsignore = .svn CVS .git

    # Where individual hosts store and look for their certificates.
    # The default value is '$certdir/$certname.pem'.
    hostcert = /home/pburkholder/.puppet/ssl/certs/camel.aarp.org.pem

    # The main Puppet configuration directory.  The default for this parameter is calculated based on the user.  If the process
    # is runnig as root or the user that ``puppetmasterd`` is supposed to run as, it defaults to a system directory, but if it's running as any other user,
    # it defaults to being in ``~``.
    # The default value is '/home/pburkholder/.puppet'.
    # confdir = /home/pburkholder/.puppet

    # Whether Puppet should manage the owner, group, and mode of files 
    # it uses internally
    # The default value is 'true'.
    # manage_internal_file_permissions = true

    # From where to retrieve facts.  The standard Puppet ``file`` type
    # is used for retrieval, so anything that is a valid file source can
    # be used here.
    # The default value is 'puppet://$server/facts/'.
    factsource = puppet://puppet/facts/

    # Where each client stores the CA certificate.
    # The default value is '$certdir/ca.pem'.
    localcacert = /home/pburkholder/.puppet/ssl/certs/ca.pem

    # The Puppet log directory.
    # The default value is '$vardir/log'.
    logdir = /home/pburkholder/.puppet/var/log

    # Boolean; whether to use the zlib library
    # The default value is 'true'.
    # zlib = true

    # Whether to print stack traces on some errors
    # trace = false

    # Whether matching in case statements and selectors
    # should be case-sensitive.  Case insensitivity is
    # handled by downcasing all values before comparison.
    # casesensitive = false

    # An extra search path for Puppet.  This is only useful
    # for those files that Puppet will load on demand, and is only
    # guaranteed to work for those cases.  In fact, the autoload
    # mechanism is responsible for making sure this directory
    # is in Ruby's search path
    # The default value is '$vardir/lib'.
    libdir = /home/pburkholder/.puppet/var/lib

    # Which arguments to pass to the diff command when printing differences between files.
    # The default value is '-u'.
    # diff_args = -u

    # The minimum time to wait (in seconds) between checking for updates in
    # configuration files.  This timeout determines how quickly Puppet checks whether
    # a file (such as manifests or templates) has changed on disk.
    # The default value is '15'.
    # filetimeout = 15

    # The certificate directory.
    # The default value is '$ssldir/certs'.
    certdir = /home/pburkholder/.puppet/ssl/certs

    # Boolean; whether puppetd should ignore schedules.  This is useful
    # for initial puppetd runs.
    # ignoreschedules = false

    # The port to communicate with the report_server.
    # The default value is '$masterport'.
    report_port = 8140

    # Whether puppetd should listen for
    # connections.  If this is true, then by default only the
    # ``runner`` server is started, which allows remote authorized
    # and authenticated nodes to connect and trigger ``puppetd``
    # runs.
    # listen = false

    # (Deprecated for 'preferred_serialization_format') What format to
    # use to dump the catalog.  Only supports 'marshal' and 'yaml'.  Only
    # matters on the client, since it asks the server for a specific format.
    # The default value is ''.
    # catalog_format = 

    # Whether to use the cached configuration when the remote
    # configuration will not compile.  This option is useful for testing
    # new configurations, where you want to fix the broken configuration
    # rather than reverting to a known-good one.
    # The default value is 'true'.
    # usecacheonfailure = true

    # Whether facts should be made all lowercase when sent to the server.
    # downcasefacts = false

    # Whether to sleep for a pseudo-random (but consistent) amount of time before
    # a run.
    # splay = false

    # The directory in which client-side YAML data is stored.
    # The default value is '$vardir/client_yaml'.
    clientyamldir = /home/pburkholder/.puppet/var/client_yaml

    # (Deprecated for 'report_server') The server to which to send transaction reports.
    # The default value is '$server'.
    reportserver = puppet

    # Whether to create dot graph files for the different
    # configuration graphs.  These dot files can be interpreted by tools
    # like OmniGraffle or dot (which is part of ImageMagick).
    # graph = false

    # Which port puppetd listens on.
    # The default value is '8139'.
    # puppetport = 8139

    # Where to store dot-outputted graphs.
    # The default value is '$statedir/graphs'.
    graphdir = /home/pburkholder/.puppet/var/state/graphs

    # The server to which server puppetd should connect
    # The default value is 'puppet'.
    # server = puppet

    # The server to use for certificate
    # authority requests.  It's a separate server because it cannot
    # and does not need to horizontally scale.
    # The default value is '$server'.
    ca_server = puppet

    # The preferred means of serializing
    # ruby instances for passing over the wire.  This won't guarantee that all
    # instances will be serialized using this method, since not all classes
    # can be guaranteed to support this format, but it will be used for all
    # classes that support it.
    # The default value is 'pson'.
    # preferred_serialization_format = pson

    # Whether to only use the cached catalog rather than compiling a new catalog
    # on every run.  Puppet can be run with this enabled by default and then selectively
    # disabled when a recompile is desired.
    # use_cached_catalog = false

    # Facts that are dynamic; these facts will be ignored when deciding whether
    # changed facts should result in a recompile.  Multiple facts should be
    # comma-separated.
    # The default value is 'memorysize,memoryfree,swapsize,swapfree'.
    # dynamicfacts = memorysize,memoryfree,swapsize,swapfree

    # The file in which puppetd stores a list of the classes
    # associated with the retrieved configuration.  Can be loaded in
    # the separate ``puppet`` executable using the ``--loadclasses``
    # option.
    # The default value is '$statedir/classes.txt'.
    classfile = /home/pburkholder/.puppet/var/state/classes.txt

    # Where puppetd caches the local configuration.  An
    # extension indicating the cache format is added automatically.
    # The default value is '$statedir/localconfig'.
    localconfig = /home/pburkholder/.puppet/var/state/localconfig

    # Where FileBucket files are stored locally.
    # The default value is '$vardir/clientbucket'.
    clientbucketdir = /home/pburkholder/.puppet/var/clientbucket

    # The log file for puppetd.  This is generally not used.
    # The default value is '$logdir/puppetd.log'.
    puppetdlog = /home/pburkholder/.puppet/var/log/puppetd.log

    # The server to which to send transaction reports.
    # The default value is '$server'.
    report_server = puppet

    # Whether to send reports after every transaction.
    # report = false

    # How often puppetd applies the client configuration; in seconds.
    # The default value is '1800'.
    # runinterval = 1800

    # The port to use for the certificate authority.
    # The default value is '$masterport'.
    ca_port = 8140

    # Whether puppetd should be run in noop mode.
    # noop = false

    # A lock file to temporarily stop puppetd from doing anything.
    # The default value is '$statedir/puppetdlock'.
    puppetdlockfile = /home/pburkholder/.puppet/var/state/puppetdlock

    # Ignore cache and always recompile the configuration.  This is
    # useful for testing new configurations, where the local cache may in
    # fact be stale even if the timestamps are up to date - if the facts
    # change or if the server changes.
    # ignorecache = false

    # The maximum time to delay before runs.  Defaults to being the same as the
    # run interval.
    # The default value is '$runinterval'.
    splaylimit = 1800

    # Where puppetd and puppetmasterd store state associated
    # with the running configuration.  In the case of puppetmasterd,
    # this file reflects the state discovered through interacting
    # with clients.
    # The default value is '$statedir/state.yaml'.
    statefile = /home/pburkholder/.puppet/var/state/state.yaml

    # How long the client should wait for the configuration to be retrieved
    # before considering it a failure.  This can help reduce flapping if too
    # many clients contact the server at one time.
    # The default value is '120'.
    # configtimeout = 120

    # Where the CA stores private certificate information.
    # The default value is '$cadir/private'.
    caprivatedir = /home/pburkholder/.puppet/ssl/ca/private

    # Where the CA stores the password for the private key
    # The default value is '$caprivatedir/ca.pass'.
    capass = /home/pburkholder/.puppet/ssl/ca/private/ca.pass

    # How long a certificate should be valid.
    # This parameter is deprecated, use ca_ttl instead
    # The default value is ''.
    # ca_days = 

    # The bit length of the certificates.
    # The default value is '2048'.
    # req_bits = 2048

    # The root directory for the certificate authority.
    # The default value is '$ssldir/ca'.
    cadir = /home/pburkholder/.puppet/ssl/ca

    # The CA public key.
    # The default value is '$cadir/ca_pub.pem'.
    capub = /home/pburkholder/.puppet/ssl/ca/ca_pub.pem

    # Where the CA stores certificate requests
    # The default value is '$cadir/requests'.
    csrdir = /home/pburkholder/.puppet/ssl/ca/requests

    # Where the serial number for certificates is stored.
    # The default value is '$cadir/serial'.
    serial = /home/pburkholder/.puppet/ssl/ca/serial

    # The default TTL for new certificates; valid values
    # must be an integer, optionally followed by one of the units
    # 'y' (years of 365 days), 'd' (days), 'h' (hours), or
    # 's' (seconds). The unit defaults to seconds. If this parameter
    # is set, ca_days is ignored. Examples are '3600' (one hour)
    # and '1825d', which is the same as '5y' (5 years) 
    # The default value is '5y'.
    # ca_ttl = 5y

    # The bit length of keys.
    # The default value is '1024'.
    # keylength = 1024

    # The CA certificate.
    # The default value is '$cadir/ca_crt.pem'.
    cacert = /home/pburkholder/.puppet/ssl/ca/ca_crt.pem

    # The certificate revocation list (CRL) for the CA. Will be used if present but otherwise ignored.
    # The default value is '$cadir/ca_crl.pem'.
    cacrl = /home/pburkholder/.puppet/ssl/ca/ca_crl.pem

    # Where the CA stores signed certificates.
    # The default value is '$cadir/signed'.
    signeddir = /home/pburkholder/.puppet/ssl/ca/signed

    # Whether to enable autosign.  Valid values are true (which
    # autosigns any key request, and is a very bad idea), false (which
    # never autosigns any key request), and the path to a file, which
    # uses that configuration file to determine which keys to sign.
    # The default value is '$confdir/autosign.conf'.
    autosign = /home/pburkholder/.puppet/autosign.conf

    # The type of hash used in certificates.
    # The default value is 'md5'.
    # ca_md = md5

    # A Complete listing of all certificates
    # The default value is '$cadir/inventory.txt'.
    cert_inventory = /home/pburkholder/.puppet/ssl/ca/inventory.txt

    # The CA private key.
    # The default value is '$cadir/ca_key.pem'.
    cakey = /home/pburkholder/.puppet/ssl/ca/ca_key.pem

    # The LDAP port.  Only used if ``ldapnodes`` is enabled.
    # The default value is '389'.
    # ldapport = 389

    # The LDAP attributes that should be stacked to arrays by adding
    # the values in all hierarchy elements of the tree.  Values
    # should be comma-separated.
    # The default value is 'puppetvar'.
    # ldapstackedattrs = puppetvar

    # The user to use to connect to LDAP.  Must be specified as a
    # full DN.
    # The default value is ''.
    # ldapuser = 

    # Whether TLS should be used when searching for nodes.
    # Defaults to false because TLS usually requires certificates
    # to be set up on the client side.
    # ldaptls = false

    # The search string used to find an LDAP node.
    # The default value is '(&(objectclass=puppetClient)(cn=%s))'.
    # ldapstring = (&(objectclass=puppetClient)(cn=%s))

    # The LDAP attributes to include when querying LDAP for nodes.  All
    # returned attributes are set as variables in the top-level scope.
    # Multiple values should be comma-separated.  The value 'all' returns
    # all attributes.
    # The default value is 'all'.
    # ldapattrs = all

    # The password to use to connect to LDAP.
    # The default value is ''.
    # ldappassword = 

    # Whether to search for node configurations in LDAP.  See
    # http://puppetlabs.com/trac/puppet/wiki/LDAPNodes for more information.
    # ldapnodes = false

    # The LDAP server.  Only used if ``ldapnodes`` is enabled.
    # The default value is 'ldap'.
    # ldapserver = ldap

    # The LDAP attributes to use to define Puppet classes.  Values
    # should be comma-separated.
    # The default value is 'puppetclass'.
    # ldapclassattrs = puppetclass

    # The attribute to use to define the parent node.
    # The default value is 'parentnode'.
    # ldapparentattr = parentnode

    # The search base for LDAP searches.  It's impossible to provide
    # a meaningful default here, although the LDAP libraries might
    # have one already set.  Generally, it should be the 'ou=Hosts'
    # branch under your main directory.
    # The default value is ''.
    # ldapbase = 

    # Whether SSL should be used when searching for nodes.
    # Defaults to false because SSL usually requires certificates
    # to be set up on the client side.
    # ldapssl = false

    # Tags to use to find resources.  If this is set, then
    # only resources tagged with the specified tags will be applied.
    # Values must be comma-separated.
    # The default value is ''.
    # tags = 

    # Whether each resource should log when it is
    # being evaluated.  This allows you to interactively see exactly
    # what is being done.
    # evaltrace = false

    # Whether to print a transaction summary.
    # summarize = false

    # Whether to validate types during parsing.
    # The default value is 'true'.
    # typecheck = true

    # Where Puppet looks for template files.  Can be a list of colon-seperated
    # directories.
    # The default value is '$vardir/templates'.
    templatedir = /home/pburkholder/.puppet/var/templates

    # Whether to validate parameters during parsing.
    # The default value is 'true'.
    # paramcheck = true

    # Whether to use lexical scoping (vs. dynamic).
    # lexical = false

    # The pid file
    # The default value is '$rundir/$name.pid'.
    pidfile = /home/pburkholder/.puppet/var/run/puppet.pid

    # The configuration file for puppet.
    # The default value is '$confdir/puppet.conf'.
    config = /home/pburkholder/.puppet/puppet.conf

    # The address a listening server should bind to.  Mongrel servers
    # default to 127.0.0.1 and WEBrick defaults to 0.0.0.0.
    # The default value is ''.
    # bindaddress = 

    # The type of server to use.  Currently supported
    # options are webrick and mongrel.  If you use mongrel, you will need
    # a proxy in front of the process or processes, since Mongrel cannot
    # speak SSL.
    # The default value is 'webrick'.
    # servertype = webrick

    # The mapping between reporting tags and email addresses.
    # The default value is '$confdir/tagmail.conf'.
    tagmap = /home/pburkholder/.puppet/tagmail.conf

    # The server through which to send email reports.
    # The default value is 'none'.
    # smtpserver = none

    # Where to find the sendmail binary with which to send email.
    # The default value is '/usr/sbin/sendmail'.
    # sendmail = /usr/sbin/sendmail

    # The 'from' email address for the reports.
    # The default value is 'report@camel.aarp.org'.
    # reportfrom = report@camel.aarp.org