Issue #5620 has been updated by James Turnbull.

Target version changed from 2.6.6 to 2.6.x


----------------------------------------
Bug #5620: user password age not updating "lastchg" field in shadow file on 
solaris
https://projects.puppetlabs.com/issues/5620

Author: derek olsen
Status: Tests Insufficient
Priority: Normal
Assignee: 
Category: user
Target version: 2.6.x
Affected Puppet version: 
Keywords: solaris lastchg password age
Branch: 


  Hello.
  env is puppet 2.6.4, facter 1.5.8, ruby 1.8.7p302, solaris 10 x86

  We are excited to get away from our super exec hacks to manage user password 
expiry.  As part of our migration to 2.6 we are testing the new password age 
management.   While the min and max password age get's adjusted correctly the 
all important "lastchg" field in the solaris shadow file does not get updated 
when the password changes.   I consider this a bug because because if the 
"lastchg" field does not get updated then the min and max ages don't provide 
the functionality they had been intended to provide.

  This example illustrates what I'm seeing.  
 
<pre>
grep liluser /etc/shadow  (note the date string "14364" that's when the 
password was last changed)
liluser:$2a$04$qJzZqI2839382jdCbXhJ8eJUhng48J/PCUuOG6jk422J/pWZDjASW:14364:7:90::::

cat pass-age.pp  (i've changed the crypt to force a password update)
  user { 'liluser':
       uid        => '516',
       gid        => '10',
       password_min_age => "7",
       password_max_age => "90",
       password   => '$2a$04$qJzZqI2839382jdCbXhJ8eJUhng48J/PCU283l3h3l22J/pWZDj
ASW',
       comment    => 'pass age test',
       shell      => '/bin/bash',
       ensure     => 'present',
   }

puppet apply --debug pass-age.pp 
[stuff removed here]
notice: /Stage[main]//User[liluser]/password: changed password
debug: Finishing transaction 76130560
debug: Storing state
debug: Stored state in 0.04 seconds

grep liluser /etc/shadow  (lastchg field unchanged)
liluser:$2a$04$qJzZqI2839382jdCbXhJ8eJUhng48J/PCUuOG6jk48kJ/pWZDjASW:14364:7:90::::
 </pre>

Thanks.  Derek.



-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to