Jira (PUP-6359) Completely remove allow/deny rules from fileserver.conf syntax

[Jeremy Barlow (JIRA)]

Title: Message Title

Jeremy Barlow commented on PUP-6359   Re: Completely remove allow/deny rules from fileserver.conf syntax Josh Cooper Puppet Server's use-legacy-auth-conf setting doesn't have any bearing on the use of auth rule evaluation per the fileserver.conf file. When use-legacy-auth-conf is set to false, which would now be the default in Puppet 5 per SERVER-1732 , Puppet Server configures auth config for Puppet::Network to essentially be a no-op but it doesn't do any reconfiguration per the fileserver.conf rule evaluation. So if you had a fileserver.conf mount point which used a "deny *" directive, use-legacy-auth-conf was set to false or not set at all, and the tk-auth rules allow access to the file* endpoints, you would still get a deny error for a request made to the mount point. From the agent side output, for example: Error: /Stage[main]/Simmons::Mount_point_binary_file/File[mount-point-binary-file]: Could not evaluate: Could not retrieve file metadata for puppet:///simmons_custom_mount_point/mount-point-binary-file: Error 500 on SERVER: Server Error: Not authorized to call find on /file_metadata/simmons_custom_mount_point/mount-point-binary-file with {:rest=>"simmons_custom_mount_point/mount-point-binary-file", :links=>"manage", :checksum_type=>"md5", :source_permissions=>"ignore"} Josh Cooper Given the above, do you still think we should warn in Puppet 4.x and fail to start for any fileserver.conf rules containing any auth directive, maybe other than "allow *", in Puppet 5+? Add Comment   This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.