Issue #9337 has been updated by Nigel Kersten.
Status changed from Needs Decision to Needs More Information
I can't reproduce this at all on Lion.
(note you should query the GroupMembership attribute directly rather than
grepping for it.)
First I start with an empty group:
<pre>
kripke:root root# cat /tmp/dt-group.pp
group { 'dt-group':
ensure => 'present',
gid => '800',
members => [],
}
</pre>
then apply it:
<pre>
kripke:root root# puppet apply -v /tmp/dt-group.pp
info: /Group[dt-group]: Provider directoryservice does not support features
manages_aix_lam; not managing attribute ia_load_module
info: Applying configuration version '1315498529'
notice: /Group[dt-group]/ensure: created
notice: Finished catalog run in 0.47 seconds
</pre>
then check it:
<pre>
kripke:root root# dscl . -read /Groups/dt-group GroupMembership
No such key: GroupMembership
</pre>
Now I try adding one account to the group:
<pre>
kripke:root root# cat /tmp/dt-group.pp
group { 'dt-group':
ensure => 'present',
gid => '800',
members => ['nbk'],
}
</pre>
Apply it:
<pre>
kripke:root root# puppet apply -v /tmp/dt-group.pp
info: /Group[dt-group]: Provider directoryservice does not support features
manages_aix_lam; not managing attribute ia_load_module
info: Applying configuration version '1315498613'
notice: /Group[dt-group]/members: defined 'members' as 'nbk'
notice: Finished catalog run in 0.15 seconds
</pre>
Check it:
<pre>
kripke:root root# dscl . -read /Groups/dt-group GroupMembership
GroupMembership: nbk
</pre>
And then another account, same cycle:
<pre>
kripke:root root# cat /tmp/dt-group.pp
group { 'dt-group':
ensure => 'present',
gid => '800',
members => ['nbk','demo'],
}
kripke:root root# puppet apply -v /tmp/dt-group.pp
info: /Group[dt-group]: Provider directoryservice does not support features
manages_aix_lam; not managing attribute ia_load_module
info: Applying configuration version '1315498667'
notice: /Group[dt-group]/members: members changed 'nbk' to 'nbk,demo'
notice: Finished catalog run in 0.15 seconds
kripke:root root# dscl . -read /Groups/dt-group GroupMembership
GroupMembership: nbk demo
</pre>
System:
<pre>
kripke:root root# dscl . -read /Groups/dt-group GroupMembership
GroupMembership: nbk demo
kripke:root root# puppet --version
2.7.3
kripke:root root# sw_vers
ProductName: Mac OS X
ProductVersion: 10.7.1
BuildVersion: 11B26
</pre>
???
----------------------------------------
Bug #9337: OS X Lion group membership not updated
https://projects.puppetlabs.com/issues/9337
Author: David Thompson
Status: Needs More Information
Priority: Normal
Assignee: Nigel Kersten
Category: OSX
Target version:
Affected Puppet version: 2.7.3
Keywords:
Branch:
Switching to puppet (2.7.3) for managing my OS X Lion systems, I'm finding
group membership not being updated. Couldn't find a dup for this, hope the
information helps...
Starting out, user dt is not a member of group dt-grp:
<pre>
# dscl . read /groups/dt-grp | grep GroupMembership
GroupMembership:
</pre>
...Run puppet, says it adds to the group:
<pre>
# puppet agent --test --environment production
info: Caching catalog for cypress.keck.waisman.wisc.edu
info: Applying configuration version '1315332406'
notice: /Stage[main]/Users_test/User[dt]/groups: groups changed '' to 'dt-grp'
notice: Finished catalog run in 0.89 seconds
</pre>
...but the user still isn't part of the group:
<pre>
# dscl . read /groups/dt-grp | grep GroupMembership
GroupMembership:
</pre>
...Hrm, let's add the user manually...just like the puppet code does...
<pre>
# dseditgroup -o edit -n . -a dt dt-grp
# dscl . read /groups/dt-grp | grep GroupMembership
GroupMembership: dt
</pre>
...But puppet still tries to add the user to the group...
<pre>
# puppet agent --test --environment production
info: Caching catalog for cypress.keck.waisman.wisc.edu
info: Applying configuration version '1315332406'
notice: /Stage[main]/Users_test/User[dt]/groups: groups changed '' to 'dt-grp'
notice: Finished catalog run in 0.83 seconds
</pre>
--
You have received this notification because you have either subscribed to it,
or are involved in it.
To change your notification preferences, please click here:
http://projects.puppetlabs.com/my/account
--
You received this message because you are subscribed to the Google Groups
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/puppet-bugs?hl=en.
