On Tue, Sep 9, 2014 at 1:30 PM, Paul Chernoch <[email protected]> wrote:
> The *acl *module has a parameter named '*group*' which takes a list of > users, groups or SIDs. > Just a small add on your wording here. Both the owner and group properties only take ONE of (1) a user, (2) a group, or (3) a SID. Is this confusing in the documentation? If so, is there a way we could update the documentation to make this more clear? > What is it for? When would I need it? > The documentation is fuzzy. This is what it says: > > Properties <https://github.com/puppetlabs/puppetlabs-acl#group>group > > The entity or entities that have access to a particular ACL descriptor. > The group identity is also known as a trustee or principal. Valid inputs > can be in the form of: > > - User - e.g. 'Bob' or 'TheNet\Bob' > - Group - e.g. 'Administrators' or 'BUILTIN\Administrators' > - SID (Security ID) - e.g. 'S-1-5-18' > > No default value will be enforced by Puppet. Using the default will allow > the group to stay set to whatever it is currently set to (group can vary > depending on the original CREATOR GROUP). Since the identity must exist on > the system in order to be used, Puppet will make sure they exist by > creating them as needed. > > *NOTE*: On Windows the CREATOR GROUP inherited ACE must be set for the > creator's primary group to be set as an ACE automatically. Group is not > always widely used. By default the group will also need to be specifically > set as an explicit managed ACE. See Microsoft's page > <http://support.microsoft.com/kb/126629> for instructions on enabling > CREATOR GROUP. > > > > Paul > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/puppet-users/172c9ce0-bdd3-4f85-8fb5-c84a55d56fe5%40googlegroups.com > <https://groups.google.com/d/msgid/puppet-users/172c9ce0-bdd3-4f85-8fb5-c84a55d56fe5%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- Rob Reynolds Developer, Puppet Labs *Join us at PuppetConf 2014 <http://www.puppetconf.com/>, September 20-24 in San Francisco* -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/CAMJiBK6EfcnL%2BNDAqt9eaHu83kVLpgPAr0XH-5PPYRubemKaZA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
