diff options
| author | Paul Berry <paul@puppetlabs.com> | 2010-11-24 15:32:32 -0800 |
|---|---|---|
| committer | James Turnbull <james@lovedthanlost.net> | 2010-12-02 06:19:58 +1100 |
| commit | 19f38794ecb5ce55b7850e77bdab919bb33c7ce3 (patch) | |
| tree | b675d5eb35d4166f2d33acc374aca5b87ea2f91c | |
| parent | eee1a9cdaa5cab6222c8e6ab087d319f976fa4e3 (diff) | |
| download | puppet-19f38794ecb5ce55b7850e77bdab919bb33c7ce3.tar.gz puppet-19f38794ecb5ce55b7850e77bdab919bb33c7ce3.tar.xz puppet-19f38794ecb5ce55b7850e77bdab919bb33c7ce3.zip | |
Disable remote ralsh by default
Changed the default auth.conf so that accesses to "/resource" are no
longer allowed. This means that to use "puppet resource -H" you will
need to configure the target machine to enable access to the
"/resource" URLs.
| -rw-r--r-- | lib/puppet/network/rest_authconfig.rb | 1 | ||||
| -rwxr-xr-x | spec/unit/network/rest_authconfig_spec.rb | 1 |
2 files changed, 0 insertions, 2 deletions
diff --git a/lib/puppet/network/rest_authconfig.rb b/lib/puppet/network/rest_authconfig.rb index 82d5a9de2..7abe06956 100644 --- a/lib/puppet/network/rest_authconfig.rb +++ b/lib/puppet/network/rest_authconfig.rb @@ -17,7 +17,6 @@ module Puppet { :acl => "/certificate/", :method => :find, :authenticated => false }, { :acl => "/certificate_request", :method => [:find, :save], :authenticated => false }, { :acl => "/status", :method => [:find], :authenticated => true }, - { :acl => "/resource", :method => [:find, :save, :search], :authenticated => true }, ] def self.main diff --git a/spec/unit/network/rest_authconfig_spec.rb b/spec/unit/network/rest_authconfig_spec.rb index 351f3f040..06436e723 100755 --- a/spec/unit/network/rest_authconfig_spec.rb +++ b/spec/unit/network/rest_authconfig_spec.rb @@ -17,7 +17,6 @@ describe Puppet::Network::RestAuthConfig do { :acl => "/certificate/", :method => :find, :authenticated => false }, { :acl => "/certificate_request", :method => [:find, :save], :authenticated => false }, { :acl => "/status", :method => [:find], :authenticated => true }, - { :acl => "/resource", :method => [:find, :save, :search], :authenticated => true }, ] before :each do |