Craig White
2011-Jul-05 22:24 UTC
[Puppet Users] Dashboard - Could not retrieve facts from inventory service
puppet 2.6.8 puppet-dashboard v1.1.1 auth.conf has: path /facts auth no method find allow dashboard, ubuntu.ttinet path /inventory auth no method search, find allow dashboard, ubuntu.ttinet # grep fact puppet.conf factpath=$vardir/lib/facter factsysnc=true The error (and I''ve tracked a lot of these down w/ Google but not getting to the heart of my problem - I''m relatively up to date): Could not retrieve facts from inventory service: 403 "Forbidden request: dashboard(10.1.0.253) access to /facts/ubuntu2.ttinet [find] authenticated at line 103 " How do I fix this? -- Craig White ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ craig.white@ttiltd.com 1.800.869.6908 ~~~~~~~~~~~~~~~~~~~~~~~~~~~ www.ttiassessments.com Need help communicating between generations at work to achieve your desired success? Let us help! -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Justin Lambert
2011-Jul-06 03:31 UTC
Re: [Puppet Users] Dashboard - Could not retrieve facts from inventory service
I actually set this up today, if you set it up like: path /facts method find auth any allow * does that fix your issue? If it does, it looks like it is something with the way your reverse DNS is working on the allow line. On Tue, Jul 5, 2011 at 4:24 PM, Craig White <craig.white@ttiltd.com> wrote:> puppet 2.6.8 > puppet-dashboard v1.1.1 > > auth.conf has: > path /facts > auth no > method find > allow dashboard, ubuntu.ttinet > > path /inventory > auth no > method search, find > allow dashboard, ubuntu.ttinet > > # grep fact puppet.conf > factpath=$vardir/lib/facter > factsysnc=true > > The error (and I''ve tracked a lot of these down w/ Google but not getting > to the heart of my problem - I''m relatively up to date): > > Could not retrieve facts from inventory service: 403 "Forbidden request: > dashboard(10.1.0.253) access to /facts/ubuntu2.ttinet [find] authenticated > at line 103 " > > How do I fix this? > > -- > Craig White ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ craig.white@ttiltd.com > 1.800.869.6908 ~~~~~~~~~~~~~~~~~~~~~~~~~~~ www.ttiassessments.com > > Need help communicating between generations at work to achieve your desired > success? Let us help! > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to > puppet-users+unsubscribe@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/puppet-users?hl=en. > >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Craig White
2011-Jul-06 15:15 UTC
Re: [Puppet Users] Dashboard - Could not retrieve facts from inventory service
Yes, ''auth any'' was the secret decoder ring. I would have thought ''auth no'' was sufficient but evidently not. Thanks Craig On Jul 5, 2011, at 8:31 PM, Justin Lambert wrote:> I actually set this up today, if you set it up like: > > path /facts > method find > auth any > allow * > > does that fix your issue? If it does, it looks like it is something with the way your reverse DNS is working on the allow line. > > On Tue, Jul 5, 2011 at 4:24 PM, Craig White <craig.white@ttiltd.com> wrote: > puppet 2.6.8 > puppet-dashboard v1.1.1 > > auth.conf has: > path /facts > auth no > method find > allow dashboard, ubuntu.ttinet > > path /inventory > auth no > method search, find > allow dashboard, ubuntu.ttinet > > # grep fact puppet.conf > factpath=$vardir/lib/facter > factsysnc=true > > The error (and I''ve tracked a lot of these down w/ Google but not getting to the heart of my problem - I''m relatively up to date): > > Could not retrieve facts from inventory service: 403 "Forbidden request: dashboard(10.1.0.253) access to /facts/ubuntu2.ttinet [find] authenticated at line 103 " > > How do I fix this? > > -- > Craig White ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ craig.white@ttiltd.com > 1.800.869.6908 ~~~~~~~~~~~~~~~~~~~~~~~~~~~ www.ttiassessments.com > > Need help communicating between generations at work to achieve your desired success? Let us help! > > -- > You received this message because you are subscribed to the Google Groups "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. > For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. > > > > -- > You received this message because you are subscribed to the Google Groups "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. > For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.-- Craig White ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ craig.white@ttiltd.com 1.800.869.6908 ~~~~~~~~~~~~~~~~~~~~~~~~~~~ www.ttiassessments.com Need help communicating between generations at work to achieve your desired success? Let us help! -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Nick Lewis
2011-Jul-06 15:45 UTC
Re: [Puppet Users] Dashboard - Could not retrieve facts from inventory service
On Wed, Jul 6, 2011 at 8:15 AM, Craig White <craig.white@ttiltd.com> wrote:> Yes, ''auth any'' was the secret decoder ring. I would have thought ''auth no'' was sufficient but evidently not. >Just to clear this up, since it''s definitely a point of some confusion.. The Dashboard makes authenticated requests. "auth no" isn''t saying "authentication is not required", but rather "this rule applies to unauthenticated requests". There was no corresponding rule for "auth yes", so it defaulted to disallowing access. Nick Lewis -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.