On Nov 19, 2008, at 9:19 AM, Robert Rati wrote:
>
> The namespaceauth.conf file seems to require FQDNs in the allow
> statements, but does anyone know if 'allow puppet' (assuming a
> correctly
> configured DNS CNAME record exists for puppet) will be accepted?
>
> Specifically, if I have a namespaceauth.conf that contains:
>
> [puppetrunner]
> allow puppet
>
> Will that allow puppetrun to be used from 'puppet' to request a node
> check in for configuration changes? Do the allow entries always
> have to
> have FQDNs?
CNAMEs don't work, because Puppet's testing the certname.
I think all of the config files require FQDNs at this point, although
you can also do wildcards (at least, *.domain.com).
--
Puritanism: The haunting fear that someone, somewhere, may be happy.
-- H. L. Mencken
---------------------------------------------------------------------
Luke Kanies | http://reductivelabs.com | http://madstop.com
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---
