If you mean, does the system default to requiring authentication, the answer is yes.
Mostly - the only default ACLs that allows unauthenticated connections are the ones that allow uploading of the CSR and downloading of the signed cert. If you start a master in verbose mode in the foreground, you'll see it load all of the default ACLs. On Mar 15, 2011, at 10:27 AM, Corey Osman wrote: > # ACL is wide open > path / > #auth no > allow * > > > This finally worked. You were right about the trailing characters. I > had a space after no and a space after the *. I removed the space and > commented out the auth and I am able to get the data. > > Now, from my understand when no auth exists it assumes auth yes. Is > this correct? > > On Mar 14, 6:30 pm, Markus Roberts <mar...@puppetlabs.com> wrote: >> This is what I have in my auth.conf file: >> >> >> >>> path / >> auth no >>> allow * >> >>> However I still get this error >> >>> '/' incorrect authenticated value: no <pycurl.Curl object at >>> 0x15e56090> >> >> So that looks like a puppet error message wrapped in a python error report. >> So I'm assuming you saw this client side. If you run the server foreground >> (or check your logs) you should get a stack trace of the error as it occurs >> on the server, which may help. >> >> You may also want to check that your auth.conf doesn't have any stray >> characters (trailing space maybe?) or unicode; the routine that emits that >> message explicitly permits "no" so...? >> >> -- Markus >> ----------------------------------------------------------- >> When in trouble or in doubt, run in circles, >> scream and shout. -- 1920's parody of the >> maritime general prudential rule >> ------------------------------------------------------------ > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Developers" group. > To post to this group, send email to puppet-dev@googlegroups.com. > To unsubscribe from this group, send email to > puppet-dev+unsubscr...@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/puppet-dev?hl=en. > -- The point of living and of being an optimist, is to be foolish enough to believe the best is yet to come. -- Peter Ustinov --------------------------------------------------------------------- Luke Kanies -|- http://puppetlabs.com -|- +1(615)594-8199 -- You received this message because you are subscribed to the Google Groups "Puppet Developers" group. To post to this group, send email to puppet-dev@googlegroups.com. To unsubscribe from this group, send email to puppet-dev+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-dev?hl=en.
