Also, be aware that, on Red Hat and Fedora, etc... they're moving to SSSD which wraps the tools in front of the SSSD database instead of /etc/shadow, etc.. so delving the shadow file won't be of much use.
Trevor On Fri, Jun 29, 2012 at 1:30 PM, Daniel Pittman <[email protected]> wrote: > On Thu, Jun 28, 2012 at 9:16 PM, Nigel Kersten <[email protected]> wrote: >> On Thu, Jun 28, 2012 at 5:00 PM, Nick Lewis <[email protected]> wrote: >>> On Thursday, June 28, 2012 at 4:57 PM, Nigel Kersten wrote: >>> On Thu, Jun 28, 2012 at 1:37 AM, David Schmitt <[email protected]> wrote: >>> >>> Aha! This and the resulting discussion pointed me in the right direction >>> what's wrong with the machines I was looking at: they're missing >>> libshadow-ruby. >>> >>> I'm starting to think we shouldn't bother consuming libshadow-ruby. >>> >>> We only use it to pull out the hash, min_age and max_age from the user >>> records, and that's relatively easy to do manually... >>> >>> In fact, we already do it manually in the user_role_add provider for >>> Solaris... >> >> Doh! I know there was a wider discussion around not relying upon tools >> like useradd at all on Linux for user management, and I think there >> may have been a ticket on this already. > > I think that would be a terrible mistake: it means that, for example, > on Debian we would not invoke the local user management hook that > useradd, etc, invoke. That would have messed with at least my > deployment in the past. > > Avoiding platform tools also means avoiding any platform extension > points, which I don't think is a huge win. > > -- > Daniel Pittman > ⎋ Puppet Labs Developer – http://puppetlabs.com > ♲ Made with 100 percent post-consumer electrons > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Developers" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/puppet-dev?hl=en. > -- Trevor Vaughan Vice President, Onyx Point, Inc (410) 541-6699 [email protected] -- This account not approved for unencrypted proprietary information -- -- You received this message because you are subscribed to the Google Groups "Puppet Developers" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-dev?hl=en.
