Issue #7241 has been updated by Stefan Schulte.
Jeremy Huntwork wrote:
> There is another workaround that I can see: change the groups param of the
> user type to be an exhaustive, complete list of secondary groups that this
> user belongs to, instead of a list of groups that should be added to the
> user's set of current groups, which appears to be the default behavior.
There already is ;-) Try the [`membership` parameter][1]
Just append missing groups:
<pre>
user { 'testuser':
groups => [ 'wheel', 'video' ]
membership => minimum # default
}
</pre>
Also remove groups that are not mentioned:
<pre>
user { 'testuser':
groups => [ 'wheel', 'video' ]
membership => inclusive # specify the complete list
}
</pre>
[1]: http://docs.puppetlabs.com/references/2.7.5/type.html#parameters-41
----------------------------------------
Feature #7241: Group membership should be a type of its own.
https://projects.puppetlabs.com/issues/7241
Author: Nigel Kersten
Status: Accepted
Priority: Normal
Assignee:
Category:
Target version: Telly
Affected Puppet version:
Keywords:
Branch:
It's very difficult right now to express declarative statements like:
* Ensure this user is not in this group, leave it alone otherwise
* Ensure this user is in this group without defining the user, leave it alone
otherwise.
I propose that we move group membership to a type of its own. That would also
allow us to abstract away the differences between different platforms, some of
which consider membership to be an attribute of the group, some of which
consider it to be an attribute of the user.
It would allow us to remove all the "authoritative" settings for user/group
membership, as they would move to this type instead.
--
You have received this notification because you have either subscribed to it,
or are involved in it.
To change your notification preferences, please click here:
http://projects.puppetlabs.com/my/account
--
You received this message because you are subscribed to the Google Groups
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/puppet-bugs?hl=en.
