Jira (PUP-11241) Not all user attributes honor forcelocal (e.g. home, shell)

[Nate McCurdy (Jira)]

Title: Message Title

Nate McCurdy created an issue   Puppet / PUP-11241 Not all user attributes honor forcelocal (e.g. home, shell) Issue Type: Bug Affects Versions: PUP 7.9.0, PUP 6.19.1 Assignee: Unassigned Created: 2021/09/14 6:03 PM Priority: Normal Reporter: Nate McCurdy Puppet Version: 6.19.1, 7.9.0 Puppet Server Version: N/A OS Name/Version: CentOS 7 When setting forcelocal => true on a user resource, I'd expect all user attributes available via /etc/passwd to be used as the "is" value for the insync? check. This appears to not be the case for the home}] and {{shell attributes. Those are always checked against their values from directory services rather than from /etc/passwd, which means those attributes appear to change on each puppet run and the user resource is no longer idempotent. Desired Behavior: When an OS has directory services enabled (e.g. LDAP via SSSD), and with an /etc/passwd file containing: nate:x:1000:1001:hello world:/opt/hello:/bin/zsh This code should read "shell", "home", and "comment" all from /etc/passwd when comparing the "is" state to the "should" state: user { 'nate': ensure => present, forcelocal => true, shell => '/bin/zsh', home => '/opt/hello', comment => 'hello world', } Actual Behavior: Only "uid", "gid", "comment", and "groups" are fetched from /etc/passwd when forcelocal => true: https://github.com/puppetlabs/puppet/blob/7.11.0/lib/puppet/provider/user/useradd.rb#L60-L78 "home" and "shell" are fetched from directory services, not from /etc/passwd. The user resource shows a change to "home" and "shell" on each Puppet run even though nothing is changing. Add Comment   This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.415709.1631667793000.130166.1631667840074%40Atlassian.JIRA.