I am having an issue adding new clients to puppet.  The master is not 
accepting connections from unauthenticated clients, even though my 
auth.conf that worked with v3.1.1 has not changed.  If I test ssl via curl 
-k, the puppet master returns "can't convert nil into String" to the 
client.  The http log on the master shows a 400 return code.  Also note, 
I'm using passenger & httpd with my puppet master.

If I do the certificate generation & signing manually and copy back to the 
client, it can communicate fine with the master.  

Here is a snippet of my auth.conf: (I originally had "auth any", but 
changed to "auth no" to see if it made any difference--which it didn't)

--------

### Unauthenticated ACLs, for clients without valid certificates; 
authenticated
### clients can also access these paths, though they rarely need to.

# allow access to the CA certificate; unauthenticated nodes need this
# in order to validate the puppet master's certificate
path /certificate/ca
auth no
method find
allow *

# allow nodes to retrieve the certificate they requested earlier
path /certificate/
auth no
method find
allow *

# allow nodes to request a new certificate
path /certificate_request
auth no
method find, save
allow *

--------

Thanks,

Mike

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to