namespaceauth.conf

This file specifies who has access to each namespace; if you create the file you must add every namespace you want any Puppet daemon to allow -- the same file is currently used by all Puppet daemons.

An example:

[fileserver]
    allow *.domain.com

[puppetmaster]
    allow *.domain.com

[puppetrunner]
    allow culain.domain.com

[puppetbucket]
    allow *.domain.com

[puppetreports]
    allow *.domain.com

[resource]
    allow server.domain.com

This is what you would install on your Puppet master; non-master hosts could leave off the 'fileserver' and 'puppetmaster' namespaces.

This file must exist to start puppetd with --listen.