Re: Admin permissions on chef-server:4000

[Adam Jacob <adam@opscode.com>]

On Tue, Mar 17, 2009 at 3:11 AM, Michal Frackowiak <michalf@wikidot.com> 
wrote:
> OK, so do you think this would work as a general-purpose security measure,
> for both chef-clients and admin access?
>
> 1. Set up a proxy server with basic auth + ssl (nginx or apache), passing to
> chef-server:4000 and 4001
> 2. Set up clients with
> registration_url        "https://user:password@proxied-chef-server:2000";
> openid_url              "https://user:password@proxied-chef-server:2001";
> ...
> 3. use https://proxied-chef-server:2000 for web ui access too

Currently, the REST client in Chef does not support HTTP Basic auth.
I'm in the middle of refactoring Chef to use a rest-client, which will
enable this behavior.  It'll be in the next Chef release.

Adam

-- 
Opscode, Inc.
Adam Jacob, CTO
T: (206) 508-4759 E: adam@opscode.com