Chef encountered an error attempting to create the client

用chef bootstrap新的client的时候遇到下面的问题：

# knife bootstrap 192.168.253.129 -x root -P 123456 --sudo -VV

-VV会打印出DEBUG LOG

......
DEBUG: read 116 bytes
DEBUG: received packet nr 11 type 94 len 92
INFO: channel_data: 0 72b
192.168.253.129 Creating a new client identity for test02 using the validator key.
DEBUG: read 484 bytes
DEBUG: received packet nr 12 type 94 len 460
INFO: channel_data: 0 443b
192.168.253.129
192.168.253.129 ================================================================================
[color=darkred]192.168.253.129 Chef encountered an error attempting to create the client "test02"
192.168.253.129 [/color]================================================================================
192.168.253.129
192.168.253.129
192.168.253.129 [2014-05-26T19:56:49-07:00] FATAL: Stacktrace dumped to /var/chef/cache/chef-stacktrace.out
192.168.253.129 [2014-05-26T19:56:49-07:00] FATAL: Errno::EHOSTUNREACH: No route to host - connect(2)
DEBUG: read 140 bytes
DEBUG: received packet nr 13 type 98 len 44
INFO: channel_request: 0 exit-status false
......


看到了No route to host - connect (2)
但是从test02是可以ping通chef server的
检查了网络是没有问题的

解决方法：

# service iptables stop
# service iptables save

清空防火墙设置 再重新bootstrap就可以了。