使用两台运行REL6的虚拟机来解决问题。 我正确设置了主人和代理人，并能够certificate代理人。 当我去跑步：
puppet agent -t 在代理上，我收到以下错误：
info: Retrieving plugin info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/root_home.rb info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/concat_basedir.rb info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/custom_auth_conf.rb info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/facter_dot_d.rb info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/puppet_vardir.rb info: Loading facts in /var/opt/lib/pe-puppet/lib/facter/pe_version.rb err: Could not retrieve catalog from remote server: Error 400 on SERVER: Error 403 on SERVER: Forbidden request: <MASTER>(IPAddress) access to /facts/<AGENT> [save] authenticated at line 56 warning: Not using cache on failed catalog err: Could not retrieve catalog; skipping run
所以我进入了master的Auth.conf文件来玩一些东西：
path ~ ^/catalog/([^/]+)$ method find auth yes allow $1 path ~ ^/node/([^/]+)$ method find auth yes allow $1 path /certificate_revocation_list/ca method find auth yes allow * path /report method save auth yes allow * path /file auth yes allow * path /certificate/ca method find auth any allow * path /certificate/ method find auth any allow * path /certificate_request method find, save auth any allow * path /certificate_status method find, search, save, destroy auth yes allow pe-internal-dashboard path / auth any
在上面的代码中，我添加了以下内容，但没有任何优点：
path /facts/ auth any method find, search allow *
我已经看到了所有的高低，我似乎无法找出问题所在。 如果任何人有任何想法如何解决这个问题，我会非常感激。
再次感谢！
当你运行sudo ./puppet-enterprise-install你必须回答y或接受这个问题的默认值：
-> console The console is a web interface for viewing reports, classifying nodes, directly managing resources, controlling Puppet runs, and invoking MCollective agents. It should usually be installed on the puppet master server, but can also installed separately. ?? Install the console? [Y/n]
也请尝试并设置mysql root帐户，以便知道root@localhost mysql帐户的密码。
确保允许访问事实的部分：
path /facts auth any method find, search allow *
出现之前
# this one is not stricly necessary, but it has the merit # to show the default policy which is deny everything else path / auth any
从评论中可以看出，这实际上拒绝了其他所有的访问，所以它应该出现在最后。
此外，请确保您检查了“ Puppet仪表板configuration手册 ”中的“启用清单支持”部分，以了解可能需要对文件进行的其他更改。