Issue #2386 has been updated by John A. Barbuto.
More testing determined that ENV[Puppet[:ssl_client_header]] was retaining the DN for the first client to contact it (which in my testing was the server itself, hence my always seeing the server's DN). HUPping Apache between different clients or setting PassengerMaxRequests to 1 fixed the problem, so it appears that ENV isn't being reset between requests. ---------------------------------------- Bug #2386: passenger >= 2.2.3 not working with 0.25.0b2 http://projects.reductivelabs.com/issues/2386 Author: John A. Barbuto Status: Accepted Priority: Normal Assigned to: Category: server Target version: 0.25.0 Complexity: Unknown Affected version: 0.25.0beta2 Keywords: I was trying to get Passenger 2.2.4 working using the instructions on http://github.com/reductivelabs/puppet/blob/master/ext/rack/README, but I kept having authentication errors (I had a correct _auth.conf_): <pre> Denying access: Forbidden request: XXX.XXX.com(YYY.YYY.YYY.YYY) access to /catalog/XXX.XXX.com [find] at line 93 </pre> Downgrading to 2.2.2 fixed the problem. Did some digging around and found that the ??[Apache] Ability to pass environment variables via mod_env directives?? change in 2.2.3 is responsible: http://blog.phusion.nl/2009/06/17/phusion-passenger-223-released-bug-fix-edition/ This was causing @request.env[Puppet[:ssl_client_header]]@ in the following places to be blank: http://github.com/reductivelabs/puppet/blob/master/lib/puppet/network/http/rack/rest.rb#L63 http://github.com/reductivelabs/puppet/blob/master/lib/puppet/network/http/rack/xmlrpc.rb#L48 I tried changing @request.env@ to @ENV@, which didn't quite work, as it always appeared to have the server's DN, not the client's. Hopefully this gives you a good head start on finding a fix. :) -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://reductivelabs.com/redmine/my/account --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/puppet-bugs?hl=en -~----------~----~----~----~------~----~------~--~---
