[chef] Re: Re: Registering client when old client exists.

[John Hanks < >]

On Mon, Jun 28, 2010 at 7:35 AM, John Hanks 
<
 >
 wrote:
> On Sun, Jun 27, 2010 at 10:21 PM, Daniel DeLeo 
> <
 >
>  wrote:
>> You're getting a 403 forbidden error when the client attempts to
>> re-register, yes? This happens because the validation client is no
>> longer an admin, but a much lesser privileged entity. You could
>> probably get the old behavior back by creating an admin client (via
>> `knife client create`) and using that instead of the stock validation
>> client. If you do that, though, your entire infrastructure is at risk
>> should the alt-validator's private key be compromised.
>
> I believe the error is a 409 but am not connected well enough to
> verify that at the moment. I'm not as concerned about security because
> the entire infrastructure is in a secured area so I'll try the admin
> client approach and let you know if that fixes it.

Just to follow-up, I made chef-validator an admin and got the behavior
I needed with re-registrations overwriting old registrations.

jbh