Issue #1890 has been updated by jaketmuss.

I have the same issue too running 0.24.7

<pre>
Mar 15 14:38:37 m puppetmasterd[23213]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/File[/var/lib/puppet/yaml]/owner)
 Cannot manage ownership unless running as root
Mar 15 14:38:37 m puppetmasterd[23213]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/File[/var/log/puppet/masterhttp.log]/owner)
 Cannot manage ownership unless running as root
Mar 15 14:38:37 m puppetmasterd[23213]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/File[/var/lib/puppet/bucket]/owner)
 Cannot manage ownership unless running as root
Mar 15 14:38:37 m puppetmasterd[23213]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[metrics]/File[/var/lib/puppet/rrd]/owner)
 Cannot manage ownership unless running as root
Mar 15 14:38:37 m puppetmasterd[23213]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/File[/var/lib/puppet/yaml]/owner)
 Cannot manage ownership unless running as root
Mar 15 14:38:37 m puppetmasterd[23213]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/File[/var/log/puppet/masterhttp.log]/owner)
 Cannot manage ownership unless running as root
Mar 15 14:38:37 m puppetmasterd[23213]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/File[/var/lib/puppet/bucket]/owner)
 Cannot manage ownership unless running as root
Mar 15 14:38:37 m puppetmasterd[23213]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/File[/var/log/puppet/masterhttp.log]/owner)
 Cannot manage ownership unless running as root
Mar 15 14:38:37 m puppetmasterd[23213]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/File[/var/lib/puppet/bucket]/owner)
 Cannot manage ownership unless running as root
Mar 15 14:38:37 m puppetmasterd[23213]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/File[/var/lib/puppet/yaml]/owner)
 Cannot manage ownership unless running as root
</pre>

----------------------------------------
Bug #1890: puppetmasterd initialization attempts to change ownership after it 
has dropped permissions
http://projects.reductivelabs.com/issues/1890

Author: micah
Status: Accepted
Priority: Normal
Assigned to: andrew
Category: plumbing
Target version: 0.25.0
Complexity: Unknown
Affected version: 0.24.7
Keywords: 


The puppetmasterd runs with 'user=puppet' and 'group=puppet' by default, 
however it seems like there are some initialization things that happen with 
0.24.7 that require root permissions, but happen after the root user/group has 
privileges have been dropped to the puppet user:

<pre>
25 19:04:28 puppetmaster puppetmasterd[14238]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/File[/var/log/puppet/masterhttp.log]/owner)
 Cannot manage ownership unless running as root
Jan 25 19:04:28 puppetmaster puppetmasterd[14238]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/File[/var/lib/puppet/bucket]/owner)
 Cannot manage ownership unless running as root
Jan 25 19:04:28 puppetmaster puppetmasterd[14238]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[rails]/File[/var/log/puppet/rails.log]/owner)
 Cannot manage ownership unless running as root
Jan 25 19:04:28 puppetmaster puppetmasterd[14238]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[rails]/File[/var/log/puppet/rails.log]/group)
 change from root to puppet failed: failed to chgrp /var/log/puppet/rails.log 
to 102: Operation not permitted - /var/log/puppet/rails.log
Jan 25 19:04:28 puppetmaster puppetmasterd[14238]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/File[/var/lib/puppet/yaml]/owner)
 Cannot manage ownership unless running as root
Jan 25 19:04:28 puppetmaster puppetmasterd[14238]: Could not call: Got 1 
failure(s) while initializing: change from root to puppet failed: failed to 
chgrp /var/log/puppet/rails.log to 102: Operation not permitted - 
/var/log/puppet/rails.log
Jan 25 19:04:41 puppetmaster puppetmasterd[14238]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/File[/var/log/puppet/masterhttp.log]/owner)
 Cannot manage ownership unless running as root
Jan 25 19:04:41 puppetmaster puppetmasterd[14238]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/File[/var/lib/puppet/yaml]/owner)
 Cannot manage ownership unless running as root
Jan 25 19:04:41 puppetmaster puppetmasterd[14238]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[rails]/File[/var/log/puppet/rails.log]/owner)
 Cannot manage ownership unless running as root
Jan 25 19:04:41 puppetmaster puppetmasterd[14238]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[rails]/File[/var/log/puppet/rails.log]/group)
 change from root to puppet failed: failed to chgrp /var/log/puppet/rails.log 
to 102: Operation not permitted - /var/log/puppet/rails.log
Jan 25 19:04:41 puppetmaster puppetmasterd[14238]: 
(/Settings[/etc/puppet/puppet.conf]/Settings[puppetmasterd]/File[/var/lib/puppet/bucket]/owner)
 Cannot manage ownership unless running as root
Jan 25 19:04:41 puppetmaster puppetmasterd[14238]: Could not call: Got 1 
failure(s) while initializing: change from root to puppet failed: failed to 
chgrp /var/log/puppet/rails.log to 102: Operation not permitted - 
/var/log/puppet/rails.log
</pre>

These go away if I change puppetd.conf to have user=root, group=root, but 
puppetmaster should be able to continue to run as user puppet.


----------------------------------------
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://reductivelabs.com/redmine/my/account

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to