On Apr 17, 5:04 pm, Steve Roberts <[email protected]> wrote: > On Apr 17, 6:25 am, jcbollinger <[email protected]> wrote: > well, allowdupe doesn't fix the issue only masks it. I knew about > taht attribute but > it just adds a duped group instead of making right the user/group.
Indeed, but that's what you asked about. > > That is possible. That general class of problems is one of many > > reasons to avoid sharing management responsibilities for any given set > > of resources among multiple agents (including humans). If it does > > happen, then the failure is probably good, because it signals admins > > that there is something they need to investigate. > > Well, I'm not worried about when the human has been told they can make > changes but rather when a human (or bad tool) makes a change nad it > slips through the cracks initially and goes boom later. I don't understand what you're looking for. You started off dissatisfied that Puppet goes boom immediately, yet you don't want the system to go boom later, either. You understandably don't want to create groups with duplicate gids. What behavior would you actually like to see? Puppet gives the appearance of a lot of intelligence, but it has a long way to go before it can pass a Turing test. Until then, it's unreasonable to expect DWIM. :) > > Puppet also has a mechanism by which you can ensure that otherwise- > > unmanaged resources of some types are all ensured absent. That's both > > very powerful and very dangerous, and I advise you to avoid it at > > least until you have more experience with Puppet. To that end, I'm > > leaving it as an exercise to determine just what the mechanism is. > > I may have to poke on how puppet does that. we actually do an > absolute /etc/passwd (and friends) in our current conf man system. > and yes it does have its pitfalls too. You can do that with Puppet as well, if you prefer, but you cannot safely mix that approach with using User and Group resources. John -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
