(resend: I meant to send this to puppet-users rather than -dev, sorry)

Hi, my puppet master is now running behind apache, via mongrel. However one of 
the clients (which is on a different subnet to the others) gives me this 
error:

May 25 21:34:02 puppet puppetmasterd[23792]: (mount[plugins]) *client* cannot 
access /plugins
May 25 21:34:02 puppet puppetmasterd[23792]: Permission denied: Cannot access 
mount[plugins]

I have no idea where it's getting the information as to what is and is not 
allowed to access the mount from, given it'll only be seeing 127.0.0.1 for the 
clients (I expect.)

Despite this, I've put the following in the namespaceauth.conf, but it makes 
no difference. The client that is having the error is on the 10.8.x.x subnet. 
I also tried adding 'allow *' to everything, but it made no difference either.

[fileserver]
    allow *.lan
    allow 10.12.0.0/24
    allow 10.8.0.0/24
    allow 127.0.0.1/32

[puppetmaster]
    allow *.lan
    allow 10.12.0.0/24
    allow 10.8.0.0/24
    allow 127.0.0.1/32

[puppetrunner]
    allow puppet.lan

[puppetbucket]
    allow *.lan
    allow 10.12.0.0/24
    allow 10.8.0.0/24
    allow 127.0.0.1/32

[puppetreports]
    allow *.lan
    allow 10.12.0.0/24
    allow 10.8.0.0/24
    allow 127.0.0.1/32

[resource]
    allow puppet.lan

[plugins]
    allow *.lan
    allow 10.12.0.0/24
    allow 10.8.0.0/24
    allow 127.0.0.1/32


-- 
Robin <ro...@kallisti.net.nz> JabberID: <eyth...@jabber.kallisti.net.nz>
http://www.kallisti.net.nz/blog       |||       http://identi.ca/eythian

PGP Key 0xA99CEB6D = 5957 6D23 8B16 EFAB FEF8  7175 14D3 6485 A99C EB6D

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to