Nope. we have forcelocal true already.

On Tuesday, 29 September 2015 20:14:38 UTC+10, Stefan Heijmans wrote:
>
> There is a user resource attribute; 
> forcelocal [1]
> Forces the management of local accounts when accounts are also being 
> managed by some other NSS
>  
> Doens't this help?
>  
>  
> [1] 
> https://docs.puppetlabs.com/references/latest/type.html#user-attribute-forcelocal
>
> On Tuesday, September 29, 2015 at 11:53:16 AM UTC+2, Alan Chalmers wrote:
>
>> Josh,
>>
>> Did you ever get a resolution for this?
>>
>> thanks
>>
>> alan
>>
>> On Wednesday, 20 March 2013 04:34:23 UTC+11, Josh wrote:
>>>
>>> The majority of our servers are attached to large LDAP directories. 
>>>  However, there are also cases when we need to define local service 
>>> accounts for whatever reason.  We do this with the "user" resource-type. 
>>>  If the host is attached to a LDAP directory, it takes Puppet a VERY long 
>>> time to process the "user" resource-type.  In our case, it takes 60+ 
>>> seconds to process each user type.  Running "puppet resource user username" 
>>> on the host takes over 2 minutes.  During this time, the "puppet" process 
>>> on each hosts is pegged at 100% CPU usage.
>>>
>>> Is there any way around this?  I have seen it brought up on the list, 
>>> but not anytime recently (2008, last I searched).
>>>
>>> Thanks.
>>>
>>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/4bd0c4ef-11b4-42c2-90ed-dc7b15b8963b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to