HomePhorge

Fix #5020 - Prefer finding node name from REST uri over certname
ea435a43dc97Unpublished

Unpublished Commit ยท Learn More

Repository Importing: This repository is still importing.

Description

Fix #5020 - Prefer finding node name from REST uri over certname

This is a behavior change. Before this patch, we always used the currently
connected node's certname to compile the catalog, despite the value of
the catalog URI REST request.
With this patch we now use the URI as the compiled node name.

This is safe because the default auth.conf (and default inserted rules
when no auth.conf is present) only allow the given connected node to
compile its own catalog.

But this also allows for greater flexibility with auth.conf. For instance
it can be used by a monitoring system to check multiple nodes catalogs
with only one certificate:

path ~ ^/catalog/([^/]+)$
method find
allow $1
allow monitoring-station.domain.com

Signed-off-by: Brice Figureau <brice-puppet@daysofwonder.com>

Details

Provenance
Brice Figureau <brice-puppet@daysofwonder.com>Authored on
James Turnbull <james@lovedthanlost.net>Committed on Nov 11 2010, 6:12 PM
vanmeeuwenPushed on Jun 2 2015, 2:22 PM
Parents
rPUa097b939ab52: Fix for #4894 -- retry tests if port is in use
Branches
Unknown
Tags
Unknown

Event Timeline

James Turnbull <james@lovedthanlost.net> committed rPUea435a43dc97: Fix #5020 - Prefer finding node name from REST uri over certname (authored by Brice Figureau <brice-puppet@daysofwonder.com>).Nov 11 2010, 6:12 PM