Issue #2386 has been updated by Tobias Kirschstein.
the patch (or reverting the commit) didn't work for me under nginx (0.8.22), passenger (2.2.5) and puppet 0.25.1 (debian unstable pkg). i still get errors like: err: /File[/var/lib/puppet/lib]: Failed to generate additional resources using 'eval_generate': Error 403 on SERVER: Forbidden request: some.puppet.client.host.name(X.X.X.X) access to /certificate_revocation_list/ca [find] at line 93 i updated from 0.24.8 and replaced webrick with passanger and nginx. ---------------------------------------- Bug #2386: passenger >= 2.2.3 not working with 0.25.0b2 http://projects.reductivelabs.com/issues/2386 Author: John A. Barbuto Status: Re-opened Priority: High Assigned to: Christian Hofstaedtler Category: server Target version: 0.25.2 Affected version: 0.25.1 Keywords: Branch: I was trying to get Passenger 2.2.4 working using the instructions on http://github.com/reductivelabs/puppet/blob/master/ext/rack/README, but I kept having authentication errors (I had a correct _auth.conf_): <pre> Denying access: Forbidden request: XXX.XXX.com(YYY.YYY.YYY.YYY) access to /catalog/XXX.XXX.com [find] at line 93 </pre> Downgrading to 2.2.2 fixed the problem. Did some digging around and found that the ??[Apache] Ability to pass environment variables via mod_env directives?? change in 2.2.3 is responsible: http://blog.phusion.nl/2009/06/17/phusion-passenger-223-released-bug-fix-edition/ This was causing @request.env[Puppet[:ssl_client_header]]@ in the following places to be blank: http://github.com/reductivelabs/puppet/blob/master/lib/puppet/network/http/rack/rest.rb#L63 http://github.com/reductivelabs/puppet/blob/master/lib/puppet/network/http/rack/xmlrpc.rb#L48 I tried changing @request.env@ to @ENV@, which didn't quite work, as it always appeared to have the server's DN, not the client's. Hopefully this gives you a good head start on finding a fix. :) -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://reductivelabs.com/redmine/my/account --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/puppet-bugs?hl=en -~----------~----~----~----~------~----~------~--~---
