The Puppet Labs Issue Tracker has Moved: https://tickets.puppetlabs.com

Feature #4388

Remove the namespaceauth.conf file

Added by Matt Robinson over 4 years ago. Updated almost 2 years ago.

Status:ClosedStart date:07/28/2010
Priority:HighDue date:
Assignee:Henrik Lindberg% Done:

0%

Category:plumbing
Target version:3.1.0
Affected Puppet version: Branch:https://github.com/puppetlabs/puppet/pull/1204
Keywords:rest api

We've Moved!

Ticket tracking is now hosted in JIRA: https://tickets.puppetlabs.com

This issue is currently not available for export. If you are experiencing the issue described below, please file a new ticket in JIRA. Once a new ticket has been created, please add a link to it that points back to this Redmine ticket.


Description

To start puppet agent with —listen you need both the auth.conf and namespaceauth.conf. I don’t think the namespaceauth.conf is necessary anymore since it seems to do the same thing but less as the auth.conf (both badly named security files), so if that’s true get rid of it. Otherwise document it.


Related issues

Related to Puppet - Bug #4629: puppet run Error 403 on SERVER: Forbidden request Closed 08/26/2010
Related to Puppet - Bug #5850: XMLRPC interface to filebucket should be removed Closed 01/11/2011
Related to Puppet - Bug #6442: puppet agent will not start with --listen unless namespac... Closed 02/23/2011
Related to Puppet - Bug #7705: Overhauling authorization system internals and interface Accepted 04/07/2011

History

#1 Updated by James Turnbull over 4 years ago

  • Status changed from Unreviewed to Accepted

#2 Updated by John Kloian over 4 years ago

It appears that currently the namespaceauth.conf file must exist, but it can be empty.

auth.conf on puppet client reads:

path /run
method save
allow *

When trying to start puppet, log states:

Will not start without authorization file /etc/puppet/namespaceauth.conf

Touch /etc/puppet/namespaceauth.conf and puppet will run correctly and use ACLs as stated in auth.conf

#3 Updated by Matt Robinson almost 4 years ago

  • Assignee deleted (Matt Robinson)

I’m pretty certain that namespaceauth.conf is completely useless at this point, so probably need removal not documentation. I haven’t conclusively proven this and don’t have the time to do so right now, so I’m removing myself from the ticket.

#4 Updated by James Turnbull almost 4 years ago

  • Project changed from Puppet Documentation to Puppet

#5 Updated by James Turnbull almost 4 years ago

  • Subject changed from Either document the namespaceauth.conf or decide it's not necessary to Remove the namespaceauth.conf file
  • Category set to plumbing
  • Status changed from Accepted to Needs Decision
  • Assignee set to Nigel Kersten

#6 Updated by Nigel Kersten over 3 years ago

  • Status changed from Needs Decision to Accepted
  • Assignee deleted (Nigel Kersten)
  • Priority changed from Normal to High
  • Target version set to 3.x

#7 Updated by Nick Fagerlund over 2 years ago

Patrick and I have just conclusively proven that namespaceauth.conf is not consulted under any circumstances in Puppet 2.7, whether on the agent or the master. We judge it safe to remove for Telly without a deprecation period.

#8 Updated by Nick Fagerlund over 2 years ago

  • Assignee set to Patrick Carlisle

So removal of the relevant code paths is merged into 3.x as of commit 4b6db1c6f3bb383d8309c5d98cb6236862caf085, but I notice the setting is still present in defaults.rb at about line 172.

Assigning to Patrick, since he did the recent deed and I think he currently knows the most about the status here.

#9 Updated by Nick Fagerlund about 2 years ago

  • Status changed from Accepted to In Topic Branch Pending Review
  • Assignee changed from Patrick Carlisle to Anonymous
  • Branch set to https://github.com/puppetlabs/puppet/pull/1203

#10 Updated by Nick Fagerlund about 2 years ago

  • Branch changed from https://github.com/puppetlabs/puppet/pull/1203 to https://github.com/puppetlabs/puppet/pull/1204

#11 Updated by Henrik Lindberg about 2 years ago

  • Assignee changed from Anonymous to Henrik Lindberg

Merged to master. Commit 11816c4c62b72f27c3f9abcdea1fe45a1dcfafb9

#12 Updated by Dominic Cleal almost 2 years ago

  • Status changed from In Topic Branch Pending Review to Merged - Pending Release

#13 Updated by Anonymous almost 2 years ago

  • Target version changed from 3.x to 3.1.0

#14 Updated by Matthaus Owens almost 2 years ago

  • Status changed from Merged - Pending Release to Closed

Released in Puppet 3.1.0-rc1

Also available in: Atom PDF