On 06/10/10 05:27, Jeff McCune wrote:
> On Tue, Oct 5, 2010 at 8:24 PM, Jeff McCune <[email protected]> wrote:
>> On Sun, Oct 3, 2010 at 2:02 AM, Brice Figureau
>> <[email protected]> wrote:
>>> This means a given node can only gets its own catalog as given in the
>>> certificate.
>>
>> Brice,
>>
>> Have you tried to set the puppet master's node_name config setting to
>> "facter" and then have puppet-load.rb "lie" about it's fqdn fact when
>> it requests a catalog?
> 
> Eh, nevermind...  node_name isn't the right place to solve this.

Correct.

> I think you're totally right, the catalog terminus should prefer the
> name given in the URI and the authorization system should allow or
> deny the request ahead of time.

I'll send a patch next week.
-- 
Brice Figureau
My Blog: http://www.masterzen.fr/

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Developers" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-dev?hl=en.

Reply via email to