On 06/15/2011 04:54 PM, Nigel Kersten wrote:
By default, yes.

It is possible to construct an API call to access fileserver data that
hasn't been explicitly assigned to that node.

However you can construct your own ACLs to restrict access to certain
files using auth.conf

http://docs.puppetlabs.com/guides/rest_auth_conf.html

For such data, I would create a specific module or custom fileserver
mount, and restrict access to it explicitly.

http://docs.puppetlabs.com/guides/file_serving.html

Thanks Nigel, I'll think about that option. I'm not yet sure if it's a better idea to keep secret files stored just on one "secure" place (say, an encrypted folder on my laptop or better) as I'm doing now, then collecting them on a server.

It was more a curiosity then a real necessity, many thanks for the explanation though.

--
Alexander Fortin
http://about.me/alexanderfortin/

--
You received this message because you are subscribed to the Google Groups "Puppet 
Users" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to