On Dec 16, 1:23 pm, Patrick <kc7...@gmail.com> wrote:
> > If such an approach is at all possible, the complete implementation
> > would include giving the proxy the means to recognize valid client
> > certificates.
>
> The proxy can and is recognizing valid certificates.  The problem is passing 
> that information on to the puppetmaster because I really don't know how to do 
> that.  I also don't know exactly which headers the puppetmaster uses.
>
> I'm thinking that if I do this, I need to remove the SSL from the file server 
> VirtualHost and just pass the information directly through.
>
> > Even if this should work - is it work all that hassle?
>
> This is a much better question.  I'm going to work on it a little more though.

Have you see the mongrel docs[1]? It's a very similar setup as far as
passing the SSL environment. I believe there are also public docs
about using hardware (f5, etc) load balancers. I know that type of
configuration works as well.

http://projects.puppetlabs.com/projects/1/wiki/Using_Mongrel

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to