Jira (PUP-1298) manage_membership for unix groups provider
Title: Message Title Austin Boyd updated an issue Puppet / PUP-1298 manage_membership for unix groups provider Change By: Austin Boyd Zendesk Ticket Count: 1 Zendesk Ticket IDs: 34846 Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.22682.1388437397000.39612.1600706220032%40Atlassian.JIRA.
Jira (PUP-1298) manage_membership for unix groups provider
Title: Message Title Jarret Lavallee updated an issue Puppet / PUP-1298 manage_membership for unix groups provider Change By: Jarret Lavallee Team: Platform OS Puppet Romania Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.22682.1388437397000.10248.1558050841094%40Atlassian.JIRA. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1298) manage_membership for unix groups provider
Title: Message Title Jarret Lavallee updated an issue Puppet / PUP-1298 manage_membership for unix groups provider Change By: Jarret Lavallee CS Priority: Needs Priority Reviewed Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.22682.1388437397000.10208.1558050480563%40Atlassian.JIRA. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1298) manage_membership for unix groups provider
Title: Message Title Trevor Vaughan commented on PUP-1298 Re: manage_membership for unix groups provider The gpasswd module still works and Puppet, Inc is welcome to pick up the code as it's Apache licensed. Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.22682.1388437397000.4319.1557847200923%40Atlassian.JIRA. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1298) manage_membership for unix groups provider
Title: Message Title Patrick Grant commented on PUP-1298 Re: manage_membership for unix groups provider Adding on behalf of behalf of customer: "Fundamentally, the request is to implement 'manages_members' in the 'groupadd' group provider. Based on the description from the 'groups' resource, this should be available, but this is not the case. While 'groupadd' group membership is defined in the group record, it is managed via the user resource. 1) May not be managed by puppet, such as a. Root, sys, or other OS-created users b. RPM-created users, such as the apache user c. Users federated by such features as ldap, sssd, or other centralized authentication 2) May not exist (yet) This is a level of configuration flexibility that is allowed by the underlying OS configuration, but cannot be expressed in Puppet." Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.22682.1388437397000.4185.1557845400464%40Atlassian.JIRA. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1298) manage_membership for unix groups provider
Title: Message Title Patrick Grant updated an issue Puppet / PUP-1298 manage_membership for unix groups provider Change By: Patrick Grant CS Priority: Needs Priority Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.22682.1388437397000.700.1557506580646%40Atlassian.JIRA. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1298) manage_membership for unix groups provider
Title: Message Title Branan Riley updated an issue Puppet / PUP-1298 manage_membership for unix groups provider Change By: Branan Riley Labels: group linux redmine triaged type_and_provider Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1298) manage_membership for unix groups provider
Title: Message Title Branan Riley updated an issue Puppet / PUP-1298 manage_membership for unix groups provider Change By: Branan Riley Labels: manage-user- group linux redmine type_and_provider Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1298) manage_membership for unix groups provider
Title: Message Title Geoff Nichols updated an issue Puppet / PUP-1298 manage_membership for unix groups provider Change By: Geoff Nichols Labels: manage-user-group redmine type_and_provider Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1298) manage_membership for unix groups provider
Title: Message Title Moses Mendoza updated an issue Puppet / PUP-1298 manage_membership for unix groups provider Change By: Moses Mendoza Labels: manage-user-group redmine triaged Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1298) manage_membership for unix groups provider
Title: Message Title John Duarte updated an issue Puppet / PUP-1298 manage_membership for unix groups provider Change By: John Duarte Labels: manage-user-group redmine triaged Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1298) manage_membership for unix groups provider
Title: Message Title Scott Nolin commented on PUP-1298 Re: manage_membership for unix groups provider I'm surprised this isn't i the default groups provider. Using the gpasswd based module does work - https://forge.puppet.com/onyxpoint/gpasswd Scott Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1298) manage_membership for unix groups provider
Title: Message Title Moses Mendoza updated an issue Puppet / PUP-1298 manage_membership for unix groups provider Change By: Moses Mendoza Labels: manage-user-group redmine Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-1298) manage_membership for unix groups provider
Title: Message Title
Jeff McCune commented on PUP-1298
Re: manage_membership for unix groups provider
To update this, I've worked with two clients who need to manage a local group in the event LDAP is down. The use case is this:
PAM is configured via /etc/security/access.conf to only allow certain groups to login to the system. Operations team members have local accounts which are not managed by Puppet. They are all a member of an "ops" group, which is defined in LDAP.
In the event LDAP is misbehaving, the ops team is unable to log into the machine to do maintenance becasue access.conf cannot resolve the + : ops : ALL rule and falls through to the default deny-all rule.
As a fallback mechanism, we want to define a group named "ops-local" which lists accounts who should always have maintenance access, even if LDAP is misbehaving.
We cannot do this in Puppet. This used to work in earlier versions of Puppet, and according to the documentation it should work with the membership field:
class opslocal {
group { ops-local:
ensure => present,
forcelocal => true,
gid => '12345',
members => ['jeff.mccune'],
provider => 'groupadd',
}
Jira (PUP-1298) manage_membership for unix groups provider
Title: Message Title Trevor Vaughan commented on an issue Re: manage_membership for unix groups provider I hate that I double hopped this one, but I also created a direct patch for this that incorporates into the provider cleanly. My issue was closed and I was told to make a module out of it so here you go https://github.com/onyxpoint/puppet-gpasswd. Add Comment Puppet / PUP-1298 manage_membership for unix groups provider I searched and didn't see this feature request so if is/was at some point forgive me. I'd like to be able to define the users that belong to a group in the group's resource. My compelling reason is that a specific unix group is used to determine ssh access via AllowGroups in sshd_config, and I'd like to make sure that at all times only specific users a... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to
Jira (PUP-1298) manage_membership for unix groups provider
Title: Message Title Gabriel Filion commented on an issue Re: manage_membership for unix groups provider hmm so basically this means that the builtin type doesn't work correctly on linux, and maybe others. Add Comment Puppet / PUP-1298 manage_membership for unix groups provider I searched and didn't see this feature request so if is/was at some point forgive me. I'd like to be able to define the users that belong to a group in the group's resource. My compelling reason is that a specific unix group is used to determine ssh access via AllowGroups in sshd_config, and I'd like to make sure that at all times only specific users a... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/groups/opt_out.
Jira (PUP-1298) manage_membership for unix groups provider
Title: Message Title redmine.exporter created an issue Puppet / PUP-1298 manage_membership for unix groups provider Issue Type: New Feature Assignee: Unassigned Created: 30/Dec/13 1:03 PM Labels: redmine Priority: Normal Reporter: redmine.exporter I searched and didn't see this feature request so if is/was at some point forgive me. I'd like to be able to define the users that belong to a group in the group's resource. My compelling reason is that a specific unix group is used to determine ssh access via AllowGroups in sshd_config, and I'd like to make sure that at all times only specific users are in that group. My workaround is to manage /etc/group as a file resource, which isn't very puppet-like. Add Comment
Jira (PUP-1298) manage_membership for unix groups provider
Title: Message Title Antoine commented on an issue Re: manage_membership for unix groups provider There seems to be a working provider here: https://github.com/pdxcat/puppet-module-group/blob/master/lib/puppet/provider/group/ggroupadd.rb Looks simple enough/ Add Comment Puppet / PUP-1298 manage_membership for unix groups provider I searched and didn't see this feature request so if is/was at some point forgive me. I'd like to be able to define the users that belong to a group in the group's resource. My compelling reason is that a specific unix group is used to determine ssh access via AllowGroups in sshd_config, and I'd like to make sure that at all times only specific users a... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at
