Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Ethan Brown updated an issue Puppet / PUP-5938 windows, user to groupassign to local administrators failed Change By: Ethan Brown Release Notes Summary: * On non-English versions of Windows where the Administrators group (or other well known accounts that are part of BUILTIN or NT AUTHORITY) are localized, Puppet may have been unable to add members to such groups (regardless of whether the group was referred to by it's English name, localized name, or it's canonical SID like S-1-5-32-544). * Fixed a minor performance issue when querying for Windows groups present on the host system. Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Ethan Brown updated an issue Puppet / PUP-5938 windows, user to groupassign to local administrators failed Change By: Ethan Brown Release Notes: Bug Fix Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Glenn Sarti commented on PUP-5938 Re: windows, user to groupassign to local administrators failed Merged up to master Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Glenn Sarti commented on PUP-5938 Re: windows, user to groupassign to local administrators failed Additional PR merged into stable at; https://github.com/puppetlabs/puppet/commit/6935e9c78ba4e7ee2b307914d8154b646c3ee5e9 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Erick Banks commented on PUP-5938 Re: windows, user to groupassign to local administrators failed Moses Mendoza conducted the QA demo. This ticket has no Acceptance Criteria but since it's very close to the kind of fix for PUP-6499 I'm assuming the same acceptance criteria from that ticket will work for this one. That is, the command executes and adds the user to the Adminstrators group in German/French. The scenarios above all passed and there are unit tests to ensure this feature continues to work. Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Ethan Brown updated an issue Puppet / PUP-5938 windows, user to groupassign to local administrators failed Change By: Ethan Brown Fix Version/s: PUP 4.5.4 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Moses Mendoza assigned an issue to qa Puppet / PUP-5938 windows, user to groupassign to local administrators failed Change By: Moses Mendoza Status: Ready for CI Test Assignee: Moses Mendoza qa Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Moses Mendoza assigned an issue to Erick Banks Puppet / PUP-5938 windows, user to groupassign to local administrators failed Change By: Moses Mendoza Assignee: qa Erick Banks Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Moses Mendoza commented on PUP-5938 Re: windows, user to groupassign to local administrators failed Merged up to master in https://github.com/puppetlabs/puppet/commit/5d32b64b947ae4859f7f0e06e44e1c70f3b767e7 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title
Moses Mendoza commented on PUP-5938
Re: windows, user to groupassign to local administrators failed
Validated on German windows with:
PS C:\Users\moses\development\puppet> bundle exec puppet apply --verbose -e "user { 'bla': ensure => 'present', comment => 'blah', groups => ['VORDEFINIERT\Administratoren',], }"
Notice: Compiled catalog for win-d454eoeuc0b.localdomain in environment production in 0.03 seconds
Info: Applying configuration version '1469114764'
Notice: /Stage[main]/Main/User[bla]/ensure: created
Info: Creating state file C:/ProgramData/PuppetLabs/puppet/cache/state/state.yaml
Notice: Applied catalog in 0.07 seconds
PS C:\Users\moses\development\puppet> bundle exec puppet apply --verbose -e "user { 'blarg': ensure => 'present', comment => 'blarg', groups => ['S-1-5-32-544',], }"
Notice: Compiled catalog for win-d454eoeuc0b.localdomain in environment production in 0.04 seconds
Info: Applying configuration version '1469115589'
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Moses Mendoza commented on PUP-5938 Re: windows, user to groupassign to local administrators failed Merged to stable in https://github.com/puppetlabs/puppet/commit/7dcbf50ffa6387fdeed31458551a2fddfcb7ecca Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Ethan Brown commented on PUP-5938 Re: windows, user to groupassign to local administrators failed Alexander Wendland / memic - thanks for the reports from German Windows for the 0x80070035 / The network path was not found error! We have finally been able to reproduce the problem and I believe the code responsible was introduced in Puppet 4.1.0 as part of PUP-4373 . However, I believe that code path was latent and inactive until some additional refactoring was performed to fix bugs as part of PUP-5684 for PUP 4.3.2 - in particular https://github.com/puppetlabs/puppet/commit/7e176bfb3adf53d234d893f8481f576e3a2e6a0b was the culprit. This is a result of BUILTIN and NT AUTHORITY being localized on German (and other versions of) Windows, and Puppets inability to properly replace those names with a . when building a WinNT style moniker. Interestingly, this bug was not reproducible on French Windows, as BUILTIN is not localized. We have validated the fix works and that on German Windows, you can refer to the Adminstrators account as S-1-5-32-544, VORDEFINIERT/Administratoren or Administratoren in your manifest. Note you cannot use the English Administrators or BUILTIN/Administrators as the relevant Windows APIs do not understand those names, but you can use the English SYSTEM for that account oddly enough. Alberto Morando - the error that you've reported is different. 0x800708ad means The user name cannot be found.. Though that this issue could be generated from a manifest that refers to a user that doesn't exist, based on how Puppet code executes, I'm uncertain how a puppet apply at the command line could be responsible for generating that particular message upon creating a new user (we have also been unable to repro). If you could provide more complete output in a new ticket, we can try to work on that a bit more as a separate problem. Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9)
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Glenn Sarti assigned an issue to Moses Mendoza Puppet / PUP-5938 windows, user to groupassign to local administrators failed Change By: Glenn Sarti Assignee: Moses Mendoza Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Ethan Brown assigned an issue to Ethan Brown Puppet / PUP-5938 windows, user to groupassign to local administrators failed Change By: Ethan Brown Assignee: Ethan Brown Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Steve Barlow updated an issue Puppet / PUP-5938 windows, user to groupassign to local administrators failed Change By: Steve Barlow Story Points: 2 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Steve Barlow updated an issue Puppet / PUP-5938 windows, user to groupassign to local administrators failed Change By: Steve Barlow Fix Version/s: PUP 4.6.0 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Steve Barlow updated an issue Puppet / PUP-5938 windows, user to groupassign to local administrators failed Change By: Steve Barlow Sprint: Windows 2016-07-27 Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title
Alberto Morando commented on PUP-5938
Re: windows, user to groupassign to local administrators failed
Hi
We have the same issue
These info maybe can help:
Server with Agent 1.3.0 is ok
Server with Agent 1.5.2 not ok ( latest version)
So I run a the
puppet apply --verbose -e "user { dk2ec004 : ensure => present, groups => ['Administrators'], password => password, }
"
with Agent 1.5.2 I get the error:
Info: Loading facts Notice: Compiled catalog for dkatest-ec1.corp.lego.com in environment production in 0.09 seconds Info: Applying configuration version '1468339806' Error: ADSI connection error: failed to parse display name of moniker `WinNT://./dk2ec004,user' HRESULT error code:0x800708ad The user name could not be found. Wrapped exception: failed to parse display name of moniker `WinNT://./dk2ec004,user' HRESULT error code:0x800708ad The user name could not be found. Error: /Stage[main]/Main/User[dk2ec004]/password: change from [old password hash redacted] to [new password hash redacted] failed: ADSI connection error: failed to parse display name of moniker `WinNT://./dk2ec004,user' HRESULT error code:0x800708ad The user name could not be found. Error: ADSI connection error: failed to parse display name of moniker `WinNT://./dk2ec004,user' HRESULT error code:0x800708ad The user name could not be found. Wrapped exception: failed to parse display name of moniker `WinNT://./dk2ec004,user' HRESULT error code:0x800708ad The user name could not be found. Error: /Stage[main]/Main/User[dk2ec004]/groups: change from to Administrators failed: ADSI connection error: failed to parse display name of moniker `WinNT://./dk2ec004,user' HRESULT error code:0x800708ad The user name could not be found. Notice: Applied catalog in 0.19 seconds
With Agent 1.3.0 (the same as the others servers) I get:
Info: Loading facts Notice: Compiled catalog for dkatest-ec1.corp.lego.com in environment production in 0.05 seconds Info: Applying configuration version '1468341690' Notice: Applied catalog in 0.19 seconds
And the User is created correctly in the Admin group
So I believe there is a bug in the new agent (I don´t know when it was introduced from verion 1.3.0 to version 1.5.2 (latest version)
Please let us know when fixed
Thanks
Add Comment
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title memic commented on PUP-5938 Re: windows, user to groupassign to local administrators failed Same Problem but not Domain specific.. just trying to add an user to group "Benutzer" Running Puppet agent on demand ... Info: Using configured environment 'production' Info: Retrieving pluginfacts Info: Retrieving plugin Info: Caching catalog for egarten.mo..net Info: Applying configuration version '1458812623' Error: ADSI connection error: failed to parse display name of moniker `WinNT://V ORDEFINIERT/Benutzer,group' HRESULT error code:0x80070035 Der Netzwerkpfad wurde nicht gefunden. Wrapped exception: failed to parse display name of moniker `WinNT://VORDEFINIERT/Benutzer,group' HRESULT error code:0x80070035 Der Netzwerkpfad wurde nicht gefunden. Error: /Stage[main]/Bob_win_user/User[bob]/groups: change from to Benutzer fail ed: ADSI connection error: failed to parse display name of moniker `WinNT://VORDEFINIERT/Benutzer,group' HRESULT error code:0x80070035 Der Netzwerkpfad wurde nicht gefunden. Notice: Applied catalog in 9.27 seconds Add Comment This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Rob Reynolds updated an issue Puppet / PUP-5938 windows, user to groupassign to local administrators failed Change By: Rob Reynolds Labels: group windows Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Rob Reynolds updated an issue Puppet / PUP-5938 windows, user to groupassign to local administrators failed Change By: Rob Reynolds Labels: group user windows Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Rob Reynolds updated an issue Puppet / PUP-5938 windows, user to groupassign to local administrators failed Change By: Rob Reynolds Component/s: Types and Providers Component/s: Client Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Ethan Brown commented on PUP-5938 Re: windows, user to groupassign to local administrators failed Alexander Wendland thanks for the report. We've recently made a number of changes Do you have any problem creating users that are not part of the local administrators group? Is the behavior the same when you place that code in a manifest instead of executing inline with -e? Can you rerun the first example with --trace --debug --verbose and post the complete output? Thanks! Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Kylo Ginsberg commented on PUP-5938 Re: windows, user to groupassign to local administrators failed Ping Ethan Brown Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title Kylo Ginsberg updated an issue Puppet / PUP-5938 windows, user to groupassign to local administrators failed Change By: Kylo Ginsberg Scrum Team: Windows Add Comment This message was sent by Atlassian JIRA (v6.4.12#64027-sha1:e3691cc) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-5938) windows, user to groupassign to local administrators failed
Title: Message Title
Alexander Wendland created an issue
Puppet / PUP-5938
windows, user to groupassign to local administrators failed
Issue Type:
Bug
Affects Versions:
PUP 4.3.2
Assignee:
Unassigned
Created:
2016/02/20 1:54 PM
Environment:
Windows 7 x64, german Version in an active directory environment puppet-agent-1.3.5-x64
Priority:
Normal
Reporter:
Alexander Wendland
Trying to add an user to local Administrator Group fails with an error message
C:\Temp>puppet apply --verbose -e "user { 'bla': ensure => 'present', comment
=> 'bla', groups => ['S-1-5-32-544',], }"
