[Puppet Users] puppet 8.x not starting service properly on Windows [2019/2022]

2024-01-16 Thread Rich Siegel
I am having an issue, where any version of puppet 8 refuses to start "most" 
times using service manager.  I am installing puppet manually from msi, 
quietly, or through internal choco packages.  It does not matter.

If I run puppet agent interactively, then puppet runs fine on version 8, in 
fact vastly superior to 7 in terms of performance.

If I uninstall puppet 8 and fall back to ANY version of puppet 7.x the 
puppet service starts properly.

I do not have any ability to get logs beyond:
The Puppet Agent service failed to start due to the following error: 
The service did not respond to the start or control request in a timely 
fashion.

I am really not sure how to further troubleshoot this.  My hunch tells me, 
that something is broken within ruby 3.2, as it doesn't look like anything 
material changed in daemon.rb.

I have opened up an issue here- [not sure if this is the proper] given all 
the perforce changes in issue tracking.  
 https://github.com/puppetlabs/puppet-agent/issues/2459

Thank you for all your help in advance!
Rich [rismoney]

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/60ab5aad-8bca-45cc-ae36-dd367e4c5856n%40googlegroups.com.


[Puppet Users] Re: New Powershell Desired Configuration Module

2014-09-15 Thread Rich Siegel
This is so AWESOME!!

On Monday, September 15, 2014 5:19:12 AM UTC-4, Marc Sutter wrote:

 Hi all,

 Just wanted to let you know that I wrote a module for DSC.
 This is a big help to configure Windows 2008+ boxes.

 https://forge.puppetlabs.com/msutter/dsc

 Cheers
 Marc



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/e94ca3fb-0268-4217-8d47-7d5273c7c004%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [Puppet Users] fileserving in parser function

2014-04-08 Thread Rich Siegel
I am getting this error in rpec using the puppet gem 3.4.3


On Monday, April 7, 2014 10:43:38 AM UTC-4, Rob Reynolds wrote:

 Rich,
  What version is the puppet agent?


 On Fri, Apr 4, 2014 at 3:51 PM, Rich Siegel rism...@gmail.comjavascript:
  wrote:

 In my  loadcsv parser function I do (I stripped out all non-relevant 
 parts)

 ```
 require 'puppet/file/serving/configuration'
 # on windows this fails - path is the args[0]:
 # path  = 'puppet:///modules/name/myfile.csv'
 content = Puppet::FileServing::Content.indirection.find(path) 
 ```

 just trying to do this:
 $niccsv = loadcsv ('puppet:///modules/network/ise-lld/ise-nic.csv')


 Puppet::Error:
Could not create resources for managing Puppet's files and 
 directories in sections [:main, :ssl]: undefined method `supports_acl?' fo
 r #Puppet::Type::File::ProviderWindows:0x00082399e0
undefined method `supports_acl?' for 
 #Puppet::Type::File::ProviderWindows:0x00082399e0 at 
 /home/rismoney/puppet/modules/dns/spe
 c/fixtures/modules/dns/manifests/windows.pp:10 on node dev.example.com

 L10 is just
 $niccsv = loadcsv ('puppet:///modules/network/lld/ise-nic.csv')

 Am I missing something to use the File API on windows?

  -- 
 You received this message because you are subscribed to the Google Groups 
 Puppet Users group.
 To unsubscribe from this group and stop receiving emails from it, send an 
 email to puppet-users...@googlegroups.com javascript:.
 To view this discussion on the web visit 
 https://groups.google.com/d/msgid/puppet-users/11260c1c-fafe-4d87-b1b9-5dcfae8aa060%40googlegroups.comhttps://groups.google.com/d/msgid/puppet-users/11260c1c-fafe-4d87-b1b9-5dcfae8aa060%40googlegroups.com?utm_medium=emailutm_source=footer
 .
 For more options, visit https://groups.google.com/d/optout.




 -- 
 Rob Reynolds
 Developer, Puppet Labs

 *Join us at **PuppetConf 2014**, September 23-24 in San Francisco 
 - http://puppetconf.com http://puppetconf.com/* 
  

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/30d3c0da-b893-4566-97ba-83a5359e77b7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[Puppet Users] fileserving in parser function

2014-04-04 Thread Rich Siegel
In my  loadcsv parser function I do (I stripped out all non-relevant parts)

```
require 'puppet/file/serving/configuration'
# on windows this fails - path is the args[0]:
# path  = 'puppet:///modules/name/myfile.csv'
content = Puppet::FileServing::Content.indirection.find(path) 
```

just trying to do this:
$niccsv = loadcsv ('puppet:///modules/network/ise-lld/ise-nic.csv')


Puppet::Error:
   Could not create resources for managing Puppet's files and 
directories in sections [:main, :ssl]: undefined method `supports_acl?' fo
r #Puppet::Type::File::ProviderWindows:0x00082399e0
   undefined method `supports_acl?' for 
#Puppet::Type::File::ProviderWindows:0x00082399e0 at 
/home/rismoney/puppet/modules/dns/spe
c/fixtures/modules/dns/manifests/windows.pp:10 on node dev.example.com

L10 is just
$niccsv = loadcsv ('puppet:///modules/network/lld/ise-nic.csv')

Am I missing something to use the File API on windows?

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/11260c1c-fafe-4d87-b1b9-5dcfae8aa060%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[Puppet Users] Re: [windows server 2008 r2] puppet errors in 3.3.0 on exchange database servers

2013-09-20 Thread Rich Siegel
Exchange DAG is essentially a cluster and the adapter in question the dag ip.

My guess is the logic for adapters should be modded for when netconnectionid is 
not null.

In general don't try to mess with hidden adapters on dags unless you understand 
ramifications.

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] Re: [windows server 2008 r2] puppet errors in 3.3.0 on exchange database servers

2013-09-20 Thread Rich Siegel
Exchange DAG is essentially a cluster and the adapter in question the dag ip.

My guess is the logic for adapters should be modded for when netconnectionid is 
not null.

In general don't try to mess with hidden adapters on dags unless you understand 
ramifications.

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users.
For more options, visit https://groups.google.com/groups/opt_out.


Re: [Puppet Users] Re: Is it possible to install actual OS using puppet?

2013-09-14 Thread Rich Siegel
 the Puppet code by which you achieve the OS installation is totally different 
 from what you would use to maintain any part of the installed system post 
 installation, via a client running on it?  

Yes but within our gitrepo, using the same tooling and contributions via the 
same workflow and peer review.  This provides transparency and you can in a 
matter of minutes see how the system is built.  Using other things like 
altiris, systemctr, standalone scripts,  
Or wds doesn't allow a true source of truth at this time.


-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users.
For more options, visit https://groups.google.com/groups/opt_out.


Re: [Puppet Users] Re: Is it possible to install actual OS using puppet?

2013-09-12 Thread Rich Siegel
So I have done a full os install using baremetal on a seemingly harder 
platform- windows.

https://github.com/rismoney/puppet-baremetal-windows

Now windows has a lot of nuances so it should be easier in theory to do 
something similar starting from *nix.

In essence I use a linux pxe server to boot a live image of an os with puppet 
installed, and then all the config is deployed to get endpoint to make it as 
expected.  Based on a facter fact I know my host is in build mode or not.

Its awesome and a build takes 20 min with no razor, only pure puppet, as all 
build config is backed in hiera.  Most of the repo is dedicated to 
reproducability of the entire solution whereas the execution a puppet code is 
relatively small to make the os how I want it.


-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] Configuring a Windows Domain Controller (DC) using puppet

2013-09-06 Thread Rich Siegel
I wrote this for managing dns.
https://github.com/rismoney/puppet-windns

If you want to build a dc, dcpromo creates and uses a scripted unattended 
file.http://technet.microsoft.com/en-us/library/cc732887.aspx

 You could easily use an exec resource to run dcpromo.  Use an unless param 
script to see if target is a dc already.

Dhcp shouldn't be colo on a dc, but you could add roles with dism module and 
leverage powershell module to do anything you want. In 2012 dcpromo is 
powershell...

HTH,
Rich

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users.
For more options, visit https://groups.google.com/groups/opt_out.


[Puppet Users] how do you update packages on windows?

2013-07-05 Thread Rich Siegel
I use chocolatey provider, but that's because I wrote it :)
Check out chocolatey on github, the provider is on the forge, and see if it 
meets your needs.

Rismoney

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users.
For more options, visit https://groups.google.com/groups/opt_out.




Re: [Puppet Users] Password policy for creating users manifest for puppet windows

2013-07-02 Thread Rich Siegel
I probably wouldn't use registry, since it feels hackish.

If it is a domain joined pc I would use group policy and can support fine grain 
pw policies.  No puppet required.

If its a workgroup pc or you want to manage it locally instead of gpo:
On reference computer--1.   Click Start - Run, 
type “secpol.msc”, to open the Security Policy tool.
2.   Configure the Password Policy as required.
3.   Right click “Security Settings”, and click “Export Policy…” to export 
the settings to a .inf file.
4.   Copy the .inf file to files folder of your module
5.   Deploy inf file via file resource or use file function on command.
6.   Exec resource the following command to import the policy file: Secedit 
/configure /db secedit.sdb /cfg exported.inf file

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users.
For more options, visit https://groups.google.com/groups/opt_out.




[Puppet Users] Re: Custom type and provider development

2013-04-07 Thread Rich Siegel
That's mine :). I haven't followed up on it.  Don't even know if it works... :( 
 when I start doing svc mgmt I am going to need it and like you,  will need the 
multi version capabilities.  It was more of a copy paste initial idea at this 
point... 

On a side note, off topic but windows relevant: I have a bunch of providers at 
various stages of dev but need to round them all up into fully functional in 
the next few months. I have a few more on deck, including AD, both building it 
and managing it.

The ones I need bad are file ACL and a reboot handler :(  

In other news, I am about to mark functional the baremetal build.  I managed to 
inject puppet/facter into WinPE and can take a host through a fully unattended 
install of win2008r2 including manage unattend.xml as a file template.  On a vm 
where ive tested it takes 10 minutes and fully bootstraps itself 2x. The best 
part is I scripted the pe build, uses only native supported tooling so anyone 
who clones the repo can build the iso in 15 min themselves.  I think it could 
be a game changer with some refinement, and could lure a lot of people away 
from massive sccm, wds, altiris or other commercial tooling.  One tool. One 
module.  Automated.  Puppet ftw




 



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.




[Puppet Users] Re: Installing Microsoft Visual Studio 2010 with Puppet?

2013-04-03 Thread Rich Siegel
A fellow maintainer of chocolatey has packaged it here i think based on public 
downloads:
https://github.com/mwrock/Chocolatey-Packages

I have not yet open sourced our choco repo but I can probably sanitize the 
vstudio package and publish it if you like  .  It won't work without having the 
binaries obviously.   

I have not yet deployed it with puppet since I just started workstation puppet 
deployment,  and deploying pkgs like vstudio is slow.  But it should be trivial.

Speaking of slow, I need to add prefetching to the choco provider.   Based on 
other threads,  seems like it will be a big improvement. 





-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.




[Puppet Users] Re: Still problem using Chocolatey provider on Windows

2013-03-24 Thread Rich Siegel
I have not tested chocolatey/puppet-chocolatey on Win8. Unfortunately I 
will not have a Win8 test environment up for at least a few weeks due to 
other priorities.
 

On Friday, March 22, 2013 10:56:34 AM UTC-4, wernerbahlke wrote:

 I got it to work on Windows 7. On Windows 8 it would not find the 
 provider. But the provider does not install the package completely for me 
 yet. As a workaround I am using an exec of a powershell script.

 On Wednesday, March 20, 2013 6:04:30 PM UTC-4, wernerbahlke wrote:

 As some before me on the group, I have a problem getting the Chocolatey 
 provider to work on Windows.

 I downloaded it from Github and placed it in 
 /etc/puppetlabs/puppet/modules/chocolatey. (I am running Puppet Enterprise 
 2.7.19).

 On a Windows 8 client, I have a very simple manifest:

 class install_notepadplusplus {

   if $::osfamily == 'windows {
 $pkg = 'notepadplusplus'

 package { $pkg:
   ensure   = installed,
   provider = 'chocolatey',
 }
   }
 }

 When I run the agent on the client, I get 

 err: Failed to apply catalog: Parameter provider failed: Invalid package 
 provider 'chocolatey' at ...

 I have pluginsync = true on both master and client which is set by 
 default using PE.

 Any hints will be greatly appreciated.

 Werner



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.




[Puppet Users] Re: Windows Reboot

2013-03-24 Thread Rich Siegel

On Monday, March 11, 2013 7:55:46 AM UTC-4, jim wrote:

 Hi Guys

 I'm using puppet for my windows configuration, and was wondering when 
 installing / configuration something windowys, it requires a reboot, how 
 does this effect the puppet run

 e.g. join to domain ?
 e.g. removing old version of software
 e.g. host re-name

 Is there options you can tell puppet its going to reboot and to finish 
 that puppet run  upon restart 


 Regards

 James




-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.




Re: [Puppet Users] Windows Reboot

2013-03-20 Thread Rich Siegel
My idea on reboots is different.  I don't think we should have puppet do the 
reboot.  If we go down this road, we need autologon, credentials, runonce, and 
a subsequent puppet agent run among other things.   Not ideal if a puppet agent 
service is running during business time.  This is orchestration and not where 
puppet should not be trying to succeed.

Originally I thought I needed a facter fact to determine if a reboot pending 
state existed, but the problem is that the facts are determined upfront.  So if 
a resource triggers a state where a reboot is needed the fact is busted.  

I think we need a new embedded construct which can check the reboot state 
before processing every resource.  It has to happen before it makes it to the 
provider since it should not be left to a provider author as it could apply to 
any resource.   If this boolean goes true then every resource in that graph 
needs to be skipped.  

A meta param can be added to say reboot = force which can force a resource to 
be processed _despite_ the boolean.  

I also need way to stateful trigger reboot flag like a lockfile so I can do a 
bios upgrade. 

Actually _rebooting_ with puppet I am leery of.  I welcome all input on this.






-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.




Re: [Puppet Users] Re: Custom ensure instead of ensurable in type provider

2013-03-15 Thread Rich Siegel
Can you publish your work on github.   I might be able to help it along.  

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.




Re: [Puppet Users] Re: Copying a 900 mb file to Windows !!!

2013-03-15 Thread Rich Siegel

  exec { 'dlfile':
command   = '. X:\tools\Get-WebFile.ps1 ; get-webfile 
http://myurl.com/file.zip c:\file.zip',
provider  = powershell
  }

I am using the poweshell provider by Josh Cooper and get-webfile is on 
http://poshcode.com/3920

Tweak line 134 from 4096 to 1048576 to make it go a ton faster. Obviously you 
can deploy the script via a separate file resource. 

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.




Re: [Puppet Users] Re: Copying a 900 mb file to Windows !!!

2013-03-14 Thread Rich Siegel
I do it with an exec resource using PowerShell provider and get-webfile. Works 
well and fast.  If interested I can post the implementation details. 

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.




[Puppet Users] Windows + Python Installation + pip + PATH environment variable

2013-03-12 Thread Rich Siegel
Have you tried changing your path via setx unattend?  
 Programmatically changing it (a la the registry provider) won't take effect 
according to http://msdn.microsoft.com/en-us/library/ms682653%28v=VS.85%29.aspx

You might also try forcing a child shell through running a sub cmd /k or 
similar means and use PowerShell provider with exec.  

I will test with my chocolatey provider to see if it works with separate 
packages with dependencies on puppet.   Chocolatey itself has the same path 
refresh problems. 


-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.




Re: [Puppet Users] Re: Windows Remote Desktop Services (Could not find a suitable provider for dism)

2013-03-12 Thread Rich Siegel
I believe you need to use the copy on github as there was an issue with using 
32/64 dism iirc

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.




Re: [Puppet Users] Puppet Support for Windows

2013-01-29 Thread Rich Siegel
Do you have any code on github?  Perhaps we can collaborate.  I am doing a 
bit of windows type and provider development currently (mostly learning how 
;)  I have a pendinga windows clustering provider, and a windows ad dns 
provider in the works.   I have also wrote a chocolatey provider that we 
are now officially using on 100s of servers.
 

On Monday, January 28, 2013 5:01:10 PM UTC-5, damian@gmail.com wrote:

 Hi Josh,

 First of all thanks for the quick reply.  

 The main priorities to make Puppet usable on Windows for us would be:

 1 Control complete state of the DACL for grant (we don't use deny).
 2 Control inheritance on DACL (at the same time as being able to control 
 other DACL grant entries for that object).
 3 Control inheritance on SACL (we only set this at a higher level).
 4 Set user account on Service.

 It would also be good to have the following (although don't think it would 
 be a showstopper for adoption):
 5 Control ACL on local SMB shares.
 6 Control ACL on registry.

 And finally the nice to haves:
 7 (Nice to have) Set DACL on parent directory but inherit permissions on 
 all children when using source param with multiple levels of hierarchy.
 8 (Nice to have) Set DACL on parent directory but inherit permissions on 
 all children when using recurse param.

 Off the top of my head (not fully worked out all our requirements with the 
 devs yet) I don't think we control access to any other types of windows 
 object (e.g. service)

 I did start having a dig in the Puppet code for the file type and all of 
 the building blocks are already there. I'm not sure how much effort it 
 would be to write an ntfsfile class but I have started having a play with 
 writing my own (in my spare time) but I've never written Ruby before so a 
 reasonable learning curve (not least just to understand the mass of file 
 and windows provider Puppet code let alone Ruby!). The permission setting 
 methods are all there (e.g. set_acl and get_acl from security.rb including 
 the protected parameter that i couldn't see a way of setting anywhere).  My 
 plan was to replace the mode param on file.rb with a dacl param that could 
 take some form of friendly dacl description.  The get_mode and set_mode 
 methods could then be changed to translate between friendly dacl and real 
 dacl rather than POSIX mode and dacl.

 The friendly DACL would use something like the following to describe each 
 ACE:
  ntfsfile { 'myfile.txt' :
 require = file,
 dacl = [ 
   ['user1', grant, [FULL_CONTROL]],
   ['user2', grant, [FILE_READ]],
   ['group1', grant, [FILE_READ, FILE_WRITE, 
 CHANGE_PERMISSIONS]],
   ['user3', deny, [FILE_READ, FILE_WRITE, FILE_EXECUTE]]
  ],
 inheritparent = false,
 source = 'puppet://modules/something/file.txt',
 }






-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.




Re: [Puppet Users] Windows Puppet File Resource Getting Puppet Server's UNIX File Permissions

2013-01-23 Thread Rich Siegel
I am only speaking for windows permissions:



 But if you push the directory with recurse = true, what permissions 
 would files get in that case? Permissions of the file on the master, or 
 default permission for that scope? 

  
On Windows the answer is the permissions on the endpoint (no 
modification).  Permissions are never copied from src to dest.
Particularly sourcing from *nix, I would end up with a box of chocolateys I 
don't want to eat.  
 
 



 I think you're confusing two unrelated dimensions.  Whether the resource 
 is recursive or not, if no mode (uid/gid) is declared for it then Puppet 
 should not modify the mode (uid/gid) of *existing files* as part of 
 managing that resource.  This is standard Puppet behavior, and users should 
 be able to rely on it.  There are functional reasons to want it, too.

 
No - don't want it. no mode, no perm change.  Standard windows inheritance 
model.
 


 There is a completely separate question of what Puppet should do when it 
 *creates 
 a new file*: if the resource declaration does not specify a mode 
 (uid/gid) then Puppet either must choose one by some other means.  Its 
 current behavior is to use the properties of the source file, which I 
 actually think is fine, though issue 5240 raises questions about that 
 behavior.

 Negative - not fine for windows.  Never want the source mode to end up on 
the target.  Bad settings = takeown = bad.
 
 

 Recursive File resources have long been a problematic area for Puppet.  
 That's not a flaw in Puppet (unless you consider recursive Files themselves 
 to be a misfeature); rather, it's inherent in the problem.  The whole point 
 of recursive File resources is to manage a bunch of files without declaring 
 all the properties of each one individually.  But then, you're not 
 declaring the properties of each one individually.  If you want fine 
 control then you need something that carries all the needed data.  The best 
 alternative in most cases is either to manage Files separately or to 
 package them up and manage them via the Package.

 On windows inheritance model works nicely.  The security.rb and mode 
interpretation should not be applicable on windows.  We need to rewrite 
perms to respect ntfs. 
 


 John



-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To view this discussion on the web visit 
https://groups.google.com/d/msg/puppet-users/-/jnCsosOdCsAJ.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



Re: [Puppet Users] Windows Puppet File Resource Getting Puppet Server's UNIX File Permissions

2013-01-20 Thread Rich Siegel
Permissions on the source should be irrelevant imho.
Windows should always respect the destination inheritance, particularly if no 
mode is specified.  Source perms are irrelevant imho.

We need a proper permissions type and provider which can handle the ntfs acl 
style.  Mode interpretation is just that - and not the way this should work.   
I looked at security.rb and just think this is just kludgey.  I need to specify 
multiple users (ad sid lookup?), their perm, and their options.   Not sure if 
it should be a part of file resource or a more generic security thing,  since 
maybe it can apply to more than files...


-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To view this discussion on the web visit 
https://groups.google.com/d/msg/puppet-users/-/x-hCGJn6Ms8J.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] variable as a variable

2012-05-03 Thread Rich Siegel
Is it possible to do the following:

define mydefine($hash) {
notice(Heres an instance ${hash[instance]})
}


$pathtohash = \$module::params::hash01

#Then do:
@mydefine { $name: hash = $pathtohash}

It want it instantiate and peform equivlant to :
@mydefine { $name: hash = $module::params::hash01}

fwiw- I realize the virtuals later...

Can anyone help, not sure I understand the syntax around doing this.

Thanks,
rismoney

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: variable as a variable

2012-05-03 Thread Rich Siegel
Most simple example

$vari=\$modu:params::hash01
notice($vari)

How can I make the notice enumerate the value stored in vari, not show
the string value as above. vari is a constant in this primitive
example.


-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.



[Puppet Users] Re: variable as a variable

2012-05-03 Thread Rich Siegel
i found the answer... in stdlib there is a getvar function.  works a
champ! thanks to Volcane on the #puppet channel

-- 
You received this message because you are subscribed to the Google Groups 
Puppet Users group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.