Issue #15562 has been updated by eric sorenson.

Status changed from Unreviewed to Rejected

Hi Thomas, I understand your problem but this is probably not a run model we 
would change to.  

In the past (on Linux and Solaris systems) I have successfully made changes 
like you describe and gotten the ldap users recognised in the same run by a 
full stop/start of nscd - there is a race condition on RHEL/Fedora because the 
init script returns control back to Puppet before nscd can actually answer 
requests so you get tons of failures. 


----------------------------------------
Feature #15562: Run only specified stage or execute each stage with a different 
process
https://projects.puppetlabs.com/issues/15562#change-69152

Author: Thomas Bétrancourt
Status: Rejected
Priority: Normal
Assignee: 
Category: agent
Target version: 
Affected Puppet version: 
Keywords: 
Branch: 


Hi!

I'm using puppet to deploy servers which are using pam-ldap and nsswitch to 
authenticate users through an LDAP directory.

In the puppet node configuration, I set up the nsswitch and pam-ldap components 
and after, i configure the users environments (create some directories, some 
files...).

The problem is that puppet is doing all the configuration in a same process. In 
this case, puppet is working with the same version of the nsswitch 
configuration during all the configuration, then, after configuring nsswitch, 
puppet isn't able to find LDAP users. But when i launch again the puppet 
process, all is working fine.

If puppet allows to execute only one stage (i.e. puppet agent --test 
--stage=ldap), only the ldap configuration will be done and after, i could 
launch again the puppet agent to do all the configuration.

One other method could be to execute a new process for each stage (i.e. fork). 
In this case, a process will configure nsswitch and an other process will do 
all the configuration...

Thank you in advance.


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to