Jira (PUP-3339) Puppet user provider failing usermod call to reset puppet uid on Fedora19 after a --mkusers.

[Joshua Partlow (JIRA)]

Title: Message Title

Joshua Partlow commented on an issue   Re: Puppet user provider failing usermod call to reset puppet uid on Fedora19 after a --mkusers. The following manual reproduction on Fedora19 looks pretty similar except that it is complaining about /vra/spool/mail/test not owned by test... [root@svctsjhgq83d67w ~]# puppet resource group test ensure=present gid=53 Notice: /Group[test]/ensure: created group { 'test': ensure => 'present', gid => '53', } [root@svctsjhgq83d67w ~]# puppet resource user test ensure=present groups=test uid=53 Notice: /User[test]/ensure: created user { 'test': ensure => 'present', groups => ['test'], uid => '53', } [root@svctsjhgq83d67w puppet resource user test > original.pp [root@svctsjhgq83d67w ~]# puppet resource group test >> original.pp [root@svctsjhgq83d67w ~]# echo "Group['test'] -> User['test']" >> original.pp [root@svctsjhgq83d67w ~]# cat original.pp user { 'test': ensure => 'present', gid => '53', groups => ['test'], home => '/home/test', password => '!!', password_max_age => '99999', password_min_age => '0', shell => '/bin/bash', uid => '53', } group { 'test': ensure => 'present', gid => '53', } Group['test'] -> User['test'] [root@svctsjhgq83d67w ~]# puppet resource user test ensure=absent Notice: /User[test]/ensure: removed user { 'test': ensure => 'absent', } [root@svctsjhgq83d67w ~]# puppet resource group test ensure=absent group { 'test': ensure => 'absent', } [root@svctsjhgq83d67w ~]# puppet apply original.pp Notice: Compiled catalog for svctsjhgq83d67w.delivery.puppetlabs.net in environment production in 0.19 seconds Notice: /Stage[main]/Main/Group[test]/ensure: created Notice: /Stage[main]/Main/User[test]/ensure: created Notice: Finished catalog run in 0.35 seconds [root@svctsjhgq83d67w ~]# mkdir /home/test [root@svctsjhgq83d67w ~]# chown test:test /home/test [root@svctsjhgq83d67w ~]# mkdir /home/test/stuff [root@svctsjhgq83d67w ~]# chown test:test /home/test/stuff/ [root@svctsjhgq83d67w ~]# puppet resource user test ensure=absent Notice: /User[test]/ensure: removed user { 'test': ensure => 'absent', } [root@svctsjhgq83d67w ~]# puppet resource group test ensure=absent group { 'test': ensure => 'absent', } [root@svctsjhgq83d67w ~]# ls -l /home total 4 drwxr-xr-x. 3 53 53 4096 Sep 24 11:43 test Now recreate the test user with a non system UID (1000 by default) [root@svctsjhgq83d67w ~]# puppet resource user test ensure=present Notice: /User[test]/ensure: created user { 'test': ensure => 'present', } [root@svctsjhgq83d67w ~]# ls -l /home total 4 drwxr-xr-x. 3 53 53 4096 Sep 24 11:43 test [root@svctsjhgq83d67w ~]# cat /etc/passwd ... puppet:x:52:52:Puppet:/var/lib/puppet:/sbin/nologin test:x:1000:1000::/home/test:/bin/bash [root@svctsjhgq83d67w ~]# chown -R 1000:1000 /home/test [root@svctsjhgq83d67w ~]# ls -l /home/ total 4 drwxr-xr-x. 3 test test 4096 Sep 24 11:43 test [root@svctsjhgq83d67w ~]# puppet apply original.pp Notice: Compiled catalog for svctsjhgq83d67w.delivery.puppetlabs.net in environment production in 0.20 seconds Notice: /Stage[main]/Main/Group[test]/gid: gid changed '1000' to '53' Error: Could not set uid on user[test]: Execution of '/usr/sbin/usermod -u 53 test' returned 12: usermod: warning: /var/spool/mail/test not owned by test usermod: Failed to change ownership of the home directory Error: /Stage[main]/Main/User[test]/uid: change from 1000 to 53 failed: Could not set uid on user[test]: Execution of '/usr/sbin/usermod -u 53 test' returned 12: usermod: warning: /var/spool/mail/test not owned by test usermod: Failed to change ownership of the home directory Notice: /Stage[main]/Main/User[test]/groups: groups changed '' to 'test' Notice: Finished catalog run in 0.30 seconds [root@svctsjhgq83d67w ~]# Add Comment   Puppet / PUP-3339 Puppet user provider failing usermod call to reset puppet uid on Fedora19 after a --mkusers. This failure is showing up in the following acceptance test: acceptance/tests/config/puppet_manages_own_configuration_in_robust_manner.rb, but only on Fedora19. This test removes the puppet user/group and then confirms that the --mkusers flag allows the puppet master to recreate them. Before doing this, it records the current user/group state, and then ... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.