Issue #15189 has been updated by eric sorenson.

Status changed from Accepted to Merged - Pending Release
Affected Puppet version deleted (3.0.0rc3)

This is slated for a release note comment, which I think is what's warranted:
<pre>
- Environments from an ENC are now authoritative over those set by the node! 
<https://projects.puppetlabs.com/issues/3910>

NOTE: For this to work, the puppet master has to have the following stanza in 
its auth.conf file:

    # allow nodes to retrieve their own node definition
    path ~ ^/node/([^/]+)$
    method find
    allow $1

I think this has been standard since the original release of 2.7, but a 
pre-existing copy of auth.conf wouldn't have been replaced, and there may have 
been a few PE point releases without this stanza. 
</pre>
----------------------------------------
Bug #15189: Default permissions need to allow 'find' on 'node'
https://projects.puppetlabs.com/issues/15189#change-69929

Author: Luke Kanies
Status: Merged - Pending Release
Priority: High
Assignee: Andrew  Parker
Category: 
Target version: 3.0.0
Affected Puppet version: 
Keywords: 
Branch: 


I don't know what caused this, but I had to add the following snippet to my 
auth.conf file to make the master work in 3.0:

    path /node
    auth yes
    method find
    allow localhost

Note that this is for a client and server running on the same box with 
'localhost' as the certname - my assumption is that you'll need 'allow *' in 
there, not 'allow localhost'.

I'm guessing this is actually a bug, and this auth change shouldn't be 
necessary.


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to