Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-12-11 Thread Jean Bond (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Jean Bond commented on  PUP-9471  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
  Re: User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
 Thanks Gabriel Nagy! Docs, I think this should go in a couple of places: 
 
The suggestion to include this with the macOS instructions (https://puppet.com/docs/puppet/latest/install_agents.html#task-7142) is a good one. Since it applies to most Mac users, we should add the instructions there. 
The Puppet known issues page (https://puppet.com/docs/puppet/latest/known_issues_puppet.html) has some (maybe outdated) information about this, so that documentation should be updated to summarize the issue and provide a link to the macOS installation instructions in the first bullet. 
The systems requirement page (https://puppet.com/docs/puppet/latest/system_requirements.html) has a note about this issue, and that note should be updated to summarize the issue and provide a link to the macOS installation instructions in the first bullet. 
  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To view this discussion on the web visit 

Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-12-11 Thread Mihai Buzgau (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Mihai Buzgau updated an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Puppet /  PUP-9471  
 
 
  User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
Change By: 
 Mihai Buzgau  
 
 
Sprint: 
 PR - 2019-03-06, NW - 2019-10-02, NW - 2019-10-16, NW - 2019-10-30, NW - 2019-11-13, 2019-11-27, 2019-12-11 , 2019-12-24  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.294488.1549047148000.3853.1576056841991%40Atlassian.JIRA.


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-11-27 Thread Mihai Buzgau (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Mihai Buzgau updated an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Puppet /  PUP-9471  
 
 
  User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
Change By: 
 Mihai Buzgau  
 
 
Sprint: 
 PR - 2019-03-06, NW - 2019-10-02, NW - 2019-10-16, NW - 2019-10-30, NW - 2019-11-13, 2019-11-27 , 2019-12-11  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.294488.1549047148000.47083.1574848264700%40Atlassian.JIRA.


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-11-14 Thread Mihai Buzgau (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Mihai Buzgau updated an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Puppet /  PUP-9471  
 
 
  User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
Change By: 
 Mihai Buzgau  
 
 
Sprint: 
 PR - 2019-03-06, NW - 2019-10-02, NW - 2019-10-16, NW - 2019-10-30, NW - 2019-11-13 , 2019-11-27  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.294488.1549047148000.32060.1573727283240%40Atlassian.JIRA.


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-10-30 Thread Mihai Buzgau (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Mihai Buzgau updated an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Puppet /  PUP-9471  
 
 
  User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
Change By: 
 Mihai Buzgau  
 
 
Sprint: 
 PR - 2019-03-06, NW - 2019-10-02, NW - 2019-10-16, NW - 2019-10-30 , NW - 2019-11-13  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.294488.1549047148000.12209.1572426004539%40Atlassian.JIRA.


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-10-16 Thread Mihai Buzgau (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Mihai Buzgau updated an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Puppet /  PUP-9471  
 
 
  User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
Change By: 
 Mihai Buzgau  
 
 
Sprint: 
 PR - 2019-03-06, NW - 2019-10-02, NW - 2019-10-16 , NW - 2019-10-30  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.294488.1549047148000.2341.1571214247389%40Atlassian.JIRA.


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-10-02 Thread Mihai Buzgau (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Mihai Buzgau updated an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Puppet /  PUP-9471  
 
 
  User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
Change By: 
 Mihai Buzgau  
 
 
Sprint: 
 PR - 2019-03-06, NW - 2019-10-02 , NW - 2019-10-16  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.294488.1549047148000.124756.1570005606624%40Atlassian.JIRA.


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-09-18 Thread Gheorghe Popescu (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Gheorghe Popescu updated an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Puppet /  PUP-9471  
 
 
  User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
Change By: 
 Gheorghe Popescu  
 
 
Sprint: 
 PR -  Triage, PR -  2019-03-06 , NW - 2019-10-02  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.294488.1549047148000.103235.1568794860803%40Atlassian.JIRA.


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-09-16 Thread Mihai Buzgau (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Mihai Buzgau assigned an issue to Unassigned  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Puppet /  PUP-9471  
 
 
  User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
Change By: 
 Mihai Buzgau  
 
 
Assignee: 
 Octavian Larion  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.294488.1549047148000.99141.1568629740375%40Atlassian.JIRA.


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-09-16 Thread Mihai Buzgau (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Mihai Buzgau updated an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Puppet /  PUP-9471  
 
 
  User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
Change By: 
 Mihai Buzgau  
 
 
Sprint: 
 PR -  Triage, PR -  2019-03-06  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.294488.1549047148000.99019.1568628242098%40Atlassian.JIRA.


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-08-08 Thread Matt Cahill (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Matt Cahill commented on  PUP-9471  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
  Re: User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
 Hi, I'd like to add a small piece of additional information in case it's of any use to whomever tackles this issue. I have done extensive troubleshooting and ratified all of the tests carried out by Gerard Kok white-listing various via our Intune MDM server, none of which worked as he also found. https://tickets.puppetlabs.com/browse/PUP-9502?focusedCommentId=635972=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-635972 The only way I can get puppet to run via launchd with full disk access that allows user management is by doing the following. 
 
Replace the link /opt/puppetlabs/bin/puppet with a shell script (the contents can be the same as the contents of /opt/puppetlabs/puppet/bin/wrapper.sh) OR 
rename /opt/puppetlabs/puppet/bin/wrapper.sh to /opt/puppetlabs/puppet/bin/wrapper and relink everything in /opt/puppetlabs/bin/puppet. Either way the important thing is that the script does not have a suffix. 
Give the path /opt/puppetlabs/bin/puppet Full Disk Access rights manually in System Preferences (not via MDM) 
 It seems that MDM full disk access rights are different from granting them in System Preferences. This of course means you would have to do this manually as an admin on every machine which for us is untenable. Having this working via the MDM full disk access permission is very important for large fleets of puppet managed macs.  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 
 

Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-07-18 Thread Thomas Kishel (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Thomas Kishel commented on  PUP-9471  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
  Re: User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
 Ahh, thx!  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at https://groups.google.com/group/puppet-bugs.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.294488.1549047148000.21993.1563473100207%40Atlassian.JIRA.
For more options, visit https://groups.google.com/d/optout.


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-07-18 Thread Mihai Buzgau (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Mihai Buzgau commented on  PUP-9471  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
  Re: User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
 Thomas Kishel more info about this here: https://github.com/puppetlabs/puppet/pull/7479 and here:  https://tickets.puppetlabs.com/browse/PUP-9502 there should already be documentation for this limitation.  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at https://groups.google.com/group/puppet-bugs.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.294488.1549047148000.21261.1563436680327%40Atlassian.JIRA.
For more options, visit https://groups.google.com/d/optout.


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-07-16 Thread Geoff Nichols (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Geoff Nichols commented on  PUP-9471  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
  Re: User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
 /cc Mihai Buzgau  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at https://groups.google.com/group/puppet-bugs.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.294488.1549047148000.17862.1563297540308%40Atlassian.JIRA.
For more options, visit https://groups.google.com/d/optout.


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-07-16 Thread Thomas Kishel (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Thomas Kishel commented on  PUP-9471  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
  Re: User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
 Geoff Nichols I don't think this is resolved, as Puppet, Inc. is currently suffering from the same issue. I was unable to workaround this by whitelisting puppet  I had to whitelist Terminal That should not resolve the issue when run via a LaunchDaemon Adding launchd (if even possible) would be a security issue. Also, we need to audit our other binaries, like (pxp-agent}} Finally, we need to provide guidance on how to automate this (if even possible) at scale. or document that it cannot be automated to save users frustration .    
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at https://groups.google.com/group/puppet-bugs.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.294488.1549047148000.17677.1563293100640%40Atlassian.JIRA.
For more options, visit https://groups.google.com/d/optout.


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-02-27 Thread Octavian Larion (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Octavian Larion commented on  PUP-9471  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
  Re: User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
 OSX 10.14 Mojave added a new security feature called “Full Disk Access” that limits the operations that a OSX user (including root) can do. You can find information about FDA here: https://macpaw.com/how-to/full-disk-access-mojave   Because of this feature, some of the Puppet functionality (for example changing a user’s home directory) does not work unless the puppet executable is whitelisted in FDA.   Whitelisting an app for FDA can be done in two official ways: 
 
Manual by the owner of the Macbook by clicking on the Apple icon > System Preferences > Go to Security & Privacy > Click on the privacy tab > Click Full Disk Access section in the side bar > Click on the “+” and add the path to the puppet executable: . Link: https://support.intego.com/hc/en-us/articles/360016683471-Enable-Full-Disk-Access-in-macOS-Mojave 
Automated using Privacy Preferences Control Profiles (PPCP) and a Mobile Device Management (MDM) Server. 
   We could try to “engineer” our Puppet Agent installer to whitelist the puppet app in FDA. DropBox has done something similar in the past and they had a lot of backlash from Apple and the community: https://www.reddit.com/r/apple/comments/51wy96/discovering_how_dropbox_hacks_your_mac/,[https://applehelpwriter.com/2016/08/29/discovering-how-dropbox-hacks-your-mac/]     Without whitelisting puppet, we’ve got 2 Puppet tests that are failing. Both of them are related to changing a user’s home directory. We were able to validate that by whitelisting puppet the tests pass.   In my opinion the best way to handle this is to document the need to whitelist Puppet in FDA and specify that if it is not whitelisted some of the system calls might fail.  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
   

Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-02-22 Thread Octavian Larion (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Octavian Larion assigned an issue to Octavian Larion  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Puppet /  PUP-9471  
 
 
  User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
Change By: 
 Octavian Larion  
 
 
Assignee: 
 Octavian Larion  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at https://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/d/optout.


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-02-20 Thread Mihai Buzgau (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Mihai Buzgau updated an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Puppet /  PUP-9471  
 
 
  User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
Change By: 
 Mihai Buzgau  
 
 
Story Points: 
 1  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at https://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/d/optout.


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-02-20 Thread Mihai Buzgau (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Mihai Buzgau updated an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Puppet /  PUP-9471  
 
 
  User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
Change By: 
 Mihai Buzgau  
 
 
Sprint: 
 PR -  Triage  2019-03-06  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at https://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/d/optout.


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-02-05 Thread Geoff Nichols (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Geoff Nichols updated an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Puppet /  PUP-9471  
 
 
  User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
Change By: 
 Geoff Nichols  
 
 
Sprint: 
 PR - Triage  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at https://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/d/optout.


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-02-05 Thread Geoff Nichols (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Geoff Nichols updated an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Puppet /  PUP-9471  
 
 
  User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
Change By: 
 Geoff Nichols  
 
 
Team: 
 Platform OS Puppet Romania  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at https://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/d/optout.


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-02-04 Thread Rob Braden (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 Rob Braden updated an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Puppet /  PUP-9471  
 
 
  User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
Change By: 
 Rob Braden  
 
 
Team: 
 Platform OS  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at https://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/d/optout.


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-02-01 Thread John Meyers (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 John Meyers updated an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Puppet /  PUP-9471  
 
 
  User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
Change By: 
 John Meyers  
 

  
 
 
 
 

 
 *Puppet Version: 4.10.6 and newer* *Puppet Server Version: N/A* *OS Name/Version: MacOS 10.14 (Mojave)*Apple has introduced new security functions in MacOS 10.14 (Mojave) that break Puppet's ability to manage users.To reproduce:Apply a puppet file that creates a 'user' with a given password hash on MacOS 10.13.  Upgrade to MacOS 10.14.  Apply the same puppet file - it will work without issue.  Delete the user puppet created under 10.13 and re-apply the same puppet file to force Puppet to update the users data.  Puppet will fail with a plethora of "Operation not permitted @ rb_sysopen" errors.  Applying a 'TCC Profile' to the 10.14 system naming the Ruby interpreter used by Puppet does not help.  *Desired Behavior: Puppet should be able to manage users in MacOS 10.14.**Actual Behavior: Puppet fails to change user data in MacOS 10.14 with "Operation not permitted"*  Example:user   { 'test':      ensure     => 'present',      comment    => 'Test',      gid        => '20',      groups     => ['_appserveradm', '_appserverusr', '_lpadmin', 'admin'],      home       => '/Users/test',      iterations => '15898',      password   => 'somepassword',      salt       => 'somehash',      shell      => '/bin/bash',      uid        => '405',       notify     => Exec['Hide sub-500 users'],    } puppet apply output:Error: Operation not permitted @ rb_sysopen - /var/db/dslocal/nodes/Default/users/test.plistError: /Stage[main]/Main/Node[default]/User[test]/password: change from [old password hash redacted] to [new password hash redacted] failed: Operation not permitted @ rb_sysopen - /var/db/dslocal/nodes/Default/users/test.plistError: Operation not permitted @ rb_sysopen - /var/db/dslocal/nodes/Default/users/test.plistError: Operation not permitted @ rb_sysopen - /var/db/dslocal/nodes/Default/users/test.plistError: /Stage[main]/Main/Node[default]/User[test]/iterations: change from 58823 to 15898 failed: Operation not permitted @ rb_sysopen - /var/db/dslocal/nodes/Default/users/test.plist  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 


Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-02-01 Thread John Meyers (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 John Meyers updated an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Puppet /  PUP-9471  
 
 
  User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
Change By: 
 John Meyers  
 

  
 
 
 
 

 
 *Puppet Version: 4.10.6 and newer* *Puppet Server Version: N/A* *OS Name/Version: MacOS 10.14 (Mojave)*Apple has introduced new security functions in MacOS 10.14 (Mojave) that break Puppet's ability to manage users.To reproduce:Apply a puppet file that creates a 'user' with a given password hash on MacOS 10.13.  Upgrade to MacOS 10.14.  Apply the same puppet file - it will work without issue.  Delete the user puppet created under 10.13 and re-apply the same puppet file to force Puppet to update the users data.  Puppet will fail with a plethora of "Operation not permitted @ rb_sysopen" errors.  Applying a 'TCC Profile' to the 10.14 system naming the Ruby interpreter used by Puppet does not help.  *Desired Behavior: Puppet should be able to manage users in MacOS 10.14.**Actual Behavior: Puppet fails to change user data in MacOS 10.14 with "Operation not permitted"*  Example:user { 'test':    ensure     => 'present',    comment    => 'Test',    gid        => '20',    groups     => ['_appserveradm', '_appserverusr', '_lpadmin', 'admin'],    home       => '/Users/test',    iterations => '15898',    password   => 'somepassword',    salt       => 'somehash',    shell      => '/bin/bash',    uid        => '405',    notify     => Exec['Hide sub-500 users'],   } puppet apply output:Error: Operation not permitted @ rb_sysopen - /var/db/dslocal/nodes/Default/users/test.plistError: /Stage[main]/Main/Node[default]/User[test]/password: change from [old password hash redacted] to [new password hash redacted] failed: Operation not permitted @ rb_sysopen - /var/db/dslocal/nodes/Default/users/test.plistError: Operation not permitted @ rb_sysopen - /var/db/dslocal/nodes/Default/users/test.plistError: Operation not permitted @ rb_sysopen - /var/db/dslocal/nodes/Default/users/test.plistError: /Stage[main]/Main/Node[default]/User[test]/iterations: change from 58823 to 15898 failed: Operation not permitted @ rb_sysopen - /var/db/dslocal/nodes/Default/users/test.plist  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  

Jira (PUP-9471) User management fails on MacOS 10.14 (Mojave)

2019-02-01 Thread John Meyers (JIRA)
Title: Message Title


 
 
 
 

 
 
 

 
   
 John Meyers created an issue  
 

  
 
 
 
 

 
 
  
 
 
 
 

 
 Puppet /  PUP-9471  
 
 
  User management fails on MacOS 10.14 (Mojave)   
 

  
 
 
 
 

 
Issue Type: 
  Bug  
 
 
Assignee: 
 Unassigned  
 
 
Created: 
 2019/02/01 10:52 AM  
 
 
Priority: 
  Normal  
 
 
Reporter: 
 John Meyers  
 

  
 
 
 
 

 
 
 

 
 
 Add Comment  
 

  
 

  
 
 
 
  
 

  
 
 
 
 

 
 This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)  
 
 

 
   
 

  
 

  
 

   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at