[chef] Re: Re: Re: Re: Re: Re: knife cookbook upload - 403 forbidden against opscode platform

[Luke Biddell < >]

Many many thanks for all the help, it's working fine now. And sorry if
I appeared impatient, I misunderstood the nature of the fix.

This is my first time with the platform, I've used an internal chef
server exclusively until now. As far as I can see, when running your
own chef server, there's no way to generate a pem for users and
connect that way. We just use clients?

I can easily switch over to users when using the platform, just me
getting used to the differences.


2010/12/5 Nuo Yan 
<
 >:
> Yes as Bryan said, the root cause fix is deployed, and there is a script to
> be run to correct a UI setting for every org affected, on Monday. I think I
> specifically fixed your organization after deploying the root cause fix.
> And I just looked into your organization account for cookbooks permissions
> and it looked fine, I refreshed the permission settings, try again and if
> you are still seeing 403s, send me an email or open a help ticket at
> help.opscode.com about your organization name (to make sure I looked at the
> right one) and the specific client you are using to sign requests.
> By the way, (I will make sure this gets fixed for you, However, ) in general
> on the platform we encourage using users, instead of clients to perform
> "knife" tasks. Just for your information, but there won't be problems using
> clients to do that if you have a specific use case. :)
> Thanks and sorry for the inconvenience.
> Nuo
> On Sat, Dec 4, 2010 at 3:03 AM, Luke Biddell 
> <
 >
>  wrote:
>>
>> I've tried it this morning and it's still giving me 403? Is this fix
>> deployed?
>>
>>
>>
>> On 3 December 2010 22:19, Luke Biddell 
>> <
 >
>>  wrote:
>> > No problem Nuo, thanks for the help. I can wait until the end of the
>> > day, that's just fine.
>> >
>> > On 3 December 2010 20:21, Nuo Yan 
>> > <
 >
>> >  wrote:
>> >> Hi Luke,
>> >> We found a small bug in the Management Console such that even when you
>> >> added
>> >> anyone or group to have "Create" rights on cookbooks, it doesn't
>> >> completely
>> >> work.
>> >>
>> >> I will fix and deploy the fix by EOD today. For a workaround, you can
>> >> either
>> >> use a "user", instead of a "client" to upload cookbooks before I deploy
>> >> the
>> >> fix, or send me an email directly to let me know your organization
>> >> account
>> >> name, and I can fix it for you.
>> >> Sorry for the inconvenience.
>> >> Thanks,
>> >> Nuo
>> >>
>> >> On Fri, Dec 3, 2010 at 9:26 AM, Luke Biddell 
>> >> <
 >
>> >> wrote:
>> >>>
>> >>> Couldn't find the ticket, can you post me the link?
>> >>>
>> >>> Thanks
>> >>>
>> >>> Luke
>> >>>
>> >>> On 3 December 2010 15:43, Ringo De Smet 
>> >>> <
 >
>> >>> wrote:
>> >>> > On 2 December 2010 23:22, Luke Biddell 
>> >>> > <
 >
>> >>> > wrote:
>> >>> >> I'm using the opscode platform and am having trouble uploading
>> >>> >> cookbooks from my client.
>> >>> >>
>> >>> >> I've used the web console and gone to cookbooks -> permissions and
>> >>> >> enabled create/list for my client.
>> >>> >>
>> >>> >> I can then successfully knife cookbook list. However knife cookbook
>> >>> >> upload mycookbook returns 403 forbidden.
>> >>> >>
>> >>> >> The permissions appear to be kinda working as if I remove the list
>> >>> >> permission for my client, knife cookbook list returns 403 forbidden
>> >>> >> as
>> >>> >> I'd expect.
>> >>> >>
>> >>> >> Have I missed a permission somewhere?
>> >>> >>
>> >>> >> My client seems fine as I can knife node list, knife role list etc
>> >>> >> without issue.
>> >>> >
>> >>> > I have the same problem, and opened a ticket on
>> >>> > http://help.opscode.com for this. Glad to see I'm not the only one
>> >>> > having this problem.
>> >>> >
>> >>> > R.
>> >>> >
>> >>
>> >>
>> >>
>> >> --
>> >> Opscode, Inc.
>> >> Nuo Yan (闫诺), Software Development Engineer
>> >> T: (425) 679-9362, E: 
>> >> 
 
>> >> Twitter, IRC, Github: nuoyan
>> >>
>> >
>
>
>
> --
> Opscode, Inc.
> Nuo Yan (闫诺), Software Development Engineer
> T: (425) 679-9362, E: 
> 
 
> Twitter, IRC, Github: nuoyan
>