puppet auth.conf allow hostname isn't working -

puppet auth.conf allow hostname isn't working -

i've got puppet master set foreman on (say) node vdc1 has ip 10.200.201.191. i've got puppet agent running on vdc2 ip 10.200.201.192. vdc2 can ping vdc1 using both "vdc1" , ip.

in auth.conf of vdc2, have following:

# added enable puppetrun path /run method save auth allow vdc1 # 1 not stricly necessary, has merit # show default policy deny else path / auth

now if puppet kick vdc1 vdc2 with:

puppet kick vdc2

the request fails. however, if alter first allow in auth.conf to:

allow 10.200.201.191

or

allow *

it runs fine. there need can utilize dns entry puppet master instead of specifying ip?

edit: here's error get:

error: host vdc2 failed: error 403 on server: forbidden request: 10.200.201.191(10.200.201.191) access /run/vdcapp2 [save] @ :2

puppet