Issue #3748 has been updated by John Florian.
James, Sorry! The example was partially mocked up to reduce clutter and protect the innocent and unfortunately I inadvertently left the "pooch" group showing in my example where I shouldn't have. The key point I was trying to illustrate is that the order is different and "wheel" appears twice on the left. I believe it is for one of these reasons that puppet determines the current state is wrong and that a change is necessary -- regardless of how many times it attempts to "fix" the state. I should also add that on further observation, the message is very consistent, if not always. In other words, the list on the left always seems to be the same and the value on the right always seems to be the same, but the left and right are never the same. ---------------------------------------- Bug #3748: group membership problem http://projects.puppetlabs.com/issues/3748 Author: John Florian Status: Needs more information Priority: Normal Assigned to: Category: user Target version: Affected version: 0.25.4 Keywords: Branch: My user accounts are kept in LDAP. On one puppet-managed host, I want to make some of those LDAP-based users members of a host-local group. I gave the following a shot: <pre> user { "tom": groups => "somegroup", } user { "dick": groups => "somegroup", } user { "harry": groups => "somegroup", } </pre> Now when I run this the first time, it did just exactly what I wanted by adding these users to the group in /etc/group. However, every time puppet runs again, it tries to repeat the process. I think this is because when it tests the current group membership, the groups are listed in a different order -- even though the current set and the desired set are identical. For example, on successive runs I see the following logged: <pre> notice: //mymodule/User[tom]/groups: groups changed 'wheel,somegroup,wheel,admin' to 'admin,somegroup,pooch,wheel' </pre> I suppose the fault may not be the ordering, but instead with the fact that 'wheel' appears twice in the current membership. I dunno, but it keeps the logs really busy with these false changes. -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://projects.puppetlabs.com/my/account -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-bugs?hl=en.
