The Puppet Labs Issue Tracker has Moved:

This issue tracker is now in read-only archive mode and automatic ticket export has been disabled. Redmine users will need to create a new JIRA account to file tickets using See the following page for information on filing tickets with JIRA:

Feature #4388

Remove the namespaceauth.conf file

Added by Matt Robinson almost 6 years ago. Updated over 3 years ago.

Status:ClosedStart date:07/28/2010
Priority:HighDue date:
Assignee:Henrik Lindberg% Done:


Target version:3.1.0
Affected Puppet version: Branch:
Keywords:rest api

We've Moved!

Ticket tracking is now hosted in JIRA:


To start puppet agent with —listen you need both the auth.conf and namespaceauth.conf. I don’t think the namespaceauth.conf is necessary anymore since it seems to do the same thing but less as the auth.conf (both badly named security files), so if that’s true get rid of it. Otherwise document it.

Related issues

Related to Puppet - Bug #4629: puppet run Error 403 on SERVER: Forbidden request Closed 08/26/2010
Related to Puppet - Bug #5850: XMLRPC interface to filebucket should be removed Closed 01/11/2011
Related to Puppet - Bug #6442: puppet agent will not start with --listen unless namespac... Closed 02/23/2011
Related to Puppet - Bug #7705: Overhauling authorization system internals and interface Accepted 04/07/2011


#1 Updated by James Turnbull almost 6 years ago

  • Status changed from Unreviewed to Accepted

#2 Updated by John Kloian over 5 years ago

It appears that currently the namespaceauth.conf file must exist, but it can be empty.

auth.conf on puppet client reads:

path /run
method save
allow *

When trying to start puppet, log states:

Will not start without authorization file /etc/puppet/namespaceauth.conf

Touch /etc/puppet/namespaceauth.conf and puppet will run correctly and use ACLs as stated in auth.conf

#3 Updated by Matt Robinson about 5 years ago

  • Assignee deleted (Matt Robinson)

I’m pretty certain that namespaceauth.conf is completely useless at this point, so probably need removal not documentation. I haven’t conclusively proven this and don’t have the time to do so right now, so I’m removing myself from the ticket.

#4 Updated by James Turnbull about 5 years ago

  • Project changed from Puppet Documentation to Puppet

#5 Updated by James Turnbull about 5 years ago

  • Subject changed from Either document the namespaceauth.conf or decide it's not necessary to Remove the namespaceauth.conf file
  • Category set to plumbing
  • Status changed from Accepted to Needs Decision
  • Assignee set to Nigel Kersten

#6 Updated by Nigel Kersten over 4 years ago

  • Status changed from Needs Decision to Accepted
  • Assignee deleted (Nigel Kersten)
  • Priority changed from Normal to High
  • Target version set to 3.x

#7 Updated by Nick Fagerlund almost 4 years ago

Patrick and I have just conclusively proven that namespaceauth.conf is not consulted under any circumstances in Puppet 2.7, whether on the agent or the master. We judge it safe to remove for Telly without a deprecation period.

#8 Updated by Nick Fagerlund almost 4 years ago

  • Assignee set to Patrick Carlisle

So removal of the relevant code paths is merged into 3.x as of commit 4b6db1c6f3bb383d8309c5d98cb6236862caf085, but I notice the setting is still present in defaults.rb at about line 172.

Assigning to Patrick, since he did the recent deed and I think he currently knows the most about the status here.

#9 Updated by Nick Fagerlund over 3 years ago

  • Status changed from Accepted to In Topic Branch Pending Review
  • Assignee changed from Patrick Carlisle to Anonymous
  • Branch set to

#10 Updated by Nick Fagerlund over 3 years ago

  • Branch changed from to

#11 Updated by Henrik Lindberg over 3 years ago

  • Assignee changed from Anonymous to Henrik Lindberg

Merged to master. Commit 11816c4c62b72f27c3f9abcdea1fe45a1dcfafb9

#12 Updated by Dominic Cleal over 3 years ago

  • Status changed from In Topic Branch Pending Review to Merged - Pending Release

#13 Updated by Anonymous over 3 years ago

  • Target version changed from 3.x to 3.1.0

#14 Updated by Matthaus Owens over 3 years ago

  • Status changed from Merged - Pending Release to Closed

Released in Puppet 3.1.0-rc1

Also available in: Atom PDF