Issue #14245 has been updated by Andrew Parker. Target version deleted (2.7.x)
---------------------------------------- Bug #14245: Puppet tries to update the group for user when he is listed as its member twice. https://projects.puppetlabs.com/issues/14245#change-80456 Author: Timur Batyrshin Status: Accepted Priority: Normal Assignee: Andrew Parker Category: Target version: Affected Puppet version: 2.7.13 Keywords: Branch: When a user is found in several nss group backends ralsh shows it as being included into a group more than once and puppet continually tries to remove the user from that group. To clarify: I have a following resource in my manifest: <pre> user { 'tomcat7': groups => 'ssl-user', } </pre> Until recently everything was just fine but lately the following actions began to appear: <pre> notice: /Stage[main]/Tomcat/User[tomcat7]/groups: groups changed 'ssl-user,ssl-user' to 'ssl-user' </pre> The reason for that behaviour turned out to be the following line in /etc/nsswitch.conf: <pre> root@susegrp1:~# cat /etc/nsswitch.conf | grep group group: files ldap compat </pre> When I remove the line everything returns back to normal way. Here is the output of actual state of resource on the system and as seen by puppet: <pre> root@susegrp1:~# id tomcat7 uid=108(tomcat7) gid=114(tomcat7) groups=301(ssl-user),114(tomcat7) root@susegrp1:~# getent group | grep ssl-user ssl-user:x:301:tomcat7 ssl-user:x:301:tomcat7 root@susegrp1:~# ralsh user tomcat7 warning: User tomcat7 found in both useradd and useradd; skipping the useradd version user { 'tomcat7': ensure => 'present', gid => '114', groups => ['ssl-user', 'ssl-user'], home => '/usr/share/tomcat7', password => '*', password_max_age => '99999', password_min_age => '0', shell => '/bin/false', uid => '108', } </pre> I've reproduced this on puppet version 2.7.11-13 and not tested others. -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://projects.puppetlabs.com/my/account -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-bugs?hl=en.
