Issue #10949 has been updated by Tim Bishop. Status changed from Unreviewed to Rejected
Ok, I just spotted the `membership` property. Sorry for the noise. ---------------------------------------- Bug #10949: Changing groups on a user doesn't remove them from old groups https://projects.puppetlabs.com/issues/10949 Author: Tim Bishop Status: Rejected Priority: Normal Assignee: Category: Target version: Affected Puppet version: Keywords: Branch: When changing the group of a user they are not removed from old groups. I'm not sure whether this is intended behaviour or a bug. Example: <pre> user { "test1": ensure => present, gid => "users", groups => "mail", } </pre> User is created: <pre> debug: User[test1](provider=useradd): Executing '/usr/sbin/useradd -g users -G mail -M test1' </pre> And in group `mail`: <pre> # grep test1 /etc/group mail:x:12:mail,postfix,test1 </pre> Change the user's groups: <pre> user { "test1": ensure => present, gid => "users", groups => "dialout", } </pre> User is added to group `dialout` but not removed from `mail`: <pre> debug: User[test1](provider=useradd): Executing '/usr/sbin/usermod -G dialout,mail test1' notice: /Stage[main]//Node[osiris]/User[test1]/groups: groups changed 'mail' to 'dialout,mail' </pre> <pre> # grep test1 /etc/group mail:x:12:mail,postfix,test1 dialout:x:18:test1 </pre> I've confirmed this behaviour on both RedHat and FreeBSD, so it's happening at a higher level than the user providers. I couldn't find the relevant code though. I'm not sure whether I think this is correct behaviour or not. In the example I've given it would be surprising for the user not to be removed from the group `mail`. However, if the user was added to a group outside of Puppet it might also be surprising to see them get removed when a change to their groups happens. -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://projects.puppetlabs.com/my/account -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-bugs?hl=en.
