On Tue, Sep 14, 2010 at 9:34 AM, Jacob Helwig <[email protected]> wrote:

> As far as getting access control right now, it's pretty much what you
> mentioned: Putting Dashboard behind something like Apache access
> controls.  You should still be able to use the dashboard as an external
> node tool, but I'd imagine that you'd either need to allow public access
> to GET at http://dashboard-host/nodes/* (specifically for requests
> accepting 'text/yaml'), or modify the external_node script to pass along
> auth credentials.  I haven't actually done this myself, so I'd love it
> if someone with more experience doing this could chime in.
>

Teyo has written an external nodes classifier script using existing
certificates to secure puppet master access to dashboard:
http://projects.puppetlabs.com/issues/4688

This should allow:
SSLVerifyClient optional
SSLOption +FakeBasicAuth

Thanks,

Nan

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to