Issue #18288 has been updated by Andrew Parker.

Tracker changed from Bug to Feature
Target version deleted (2.7.x)

I'm marking this as a feature request since it is a large change to existing 
functionality and not a deviation from documented behavior, as far as I know.
----------------------------------------
Feature #18288: Multiple auth.conf stanzas for the same endpoint are not 
respected
https://projects.puppetlabs.com/issues/18288#change-79692

Author: Branan Purvine-Riley
Status: In Topic Branch Pending Review
Priority: Normal
Assignee: 
Category: 
Target version: 
Affected Puppet version: 2.7.19
Keywords: 
Branch: https://github.com/puppetlabs/puppet/pull/1353


With the following auth.conf, only the `bigbrother` node will be able to fetch 
catalogs. All other nodes will be implicitly denied by their absense from the 
`bigbrother` declaration. This makes it difficult to use the concat pattern to 
puppetize auth.conf

    # big brother can see all the catalogs
    path ~ ^/catalog/[^/]+$
    method find
    allow bigbrother
    
    # allow nodes to retrieve their own catalog (ie their configuration)
    path ~ ^/catalog/([^/]+)$
    method find
    allow $1


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to