David Thompson
2011-Sep-06 19:04 UTC
[Puppet Users] OS X Lion group membership not updated
Switching to puppet (2.7.3) for managing my OS X Lion systems, I''m finding group membership not being updated. Starting out, user dt is not a member of group dt-grp: # dscl . read /groups/dt-grp | grep GroupMembership GroupMembership: ...Run puppet, says it adds to the group: # puppet agent --test --environment production info: Caching catalog for cypress.keck.waisman.wisc.edu info: Applying configuration version ''1315332406'' notice: /Stage[main]/Users_test/User[dt]/groups: groups changed '''' to ''dt-grp'' notice: Finished catalog run in 0.89 seconds ...but the user still isn''t part of the group: # dscl . read /groups/dt-grp | grep GroupMembership GroupMembership: ...Hrm, let''s add the user manually... # dseditgroup -o edit -n . -a dt dt-grp # dscl . read /groups/dt-grp | grep GroupMembership GroupMembership: dt ...But puppet still tries to add the user to the group... # puppet agent --test --environment production info: Caching catalog for cypress.keck.waisman.wisc.edu info: Applying configuration version ''1315332406'' notice: /Stage[main]/Users_test/User[dt]/groups: groups changed '''' to ''dt-grp'' notice: Finished catalog run in 0.83 seconds Any help much appreciated... -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
James Turnbull
2011-Sep-06 19:42 UTC
Re: [Puppet Users] OS X Lion group membership not updated
David Thompson wrote:> Switching to puppet (2.7.3) for managing my OS X Lion systems, I''m > finding group membership not being updated. > > > Any help much appreciated... >David I think there are a bunch of OSX Lion bugs in the ticket DB that might be worth checking if this one is picked up. We''ve got code for some and need to do some refactoring for others. Cheers James -- James Turnbull Puppet Labs 1-503-734-8571 Join us for PuppetConf <http://www.bit.ly/puppetconfsig>, September 22nd and 23rd in Portland, Oregon, USA. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Nigel Kersten
2011-Sep-07 13:07 UTC
Re: [Puppet Users] OS X Lion group membership not updated
On Tue, Sep 6, 2011 at 12:42 PM, James Turnbull <james@puppetlabs.com>wrote:> David Thompson wrote: > > Switching to puppet (2.7.3) for managing my OS X Lion systems, I''m > > finding group membership not being updated. > > > > > > Any help much appreciated... > > > > David > > I think there are a bunch of OSX Lion bugs in the ticket DB that might > be worth checking if this one is picked up. We''ve got code for some and > need to do some refactoring for others. > >So that people understand, Apple have changed a bunch of things around DirectoryServices that caused our provider to break under Lion. I just got Lion installed recently on my laptop, and I''m planning to churn through these issues in the next few days, targeting the fixes at 2.7.x. -- Nigel Kersten Product Manager, Puppet Labs *Join us for **PuppetConf * <http://www.bit.ly/puppetconfsig> Sept 22/23 Portland, Oregon, USA. * * -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
doug@ebackpack.com
2013-Jan-25 22:33 UTC
Re: [Puppet Users] OS X Lion group membership not updated
Sorry to revive an old thread, but this seems to be the only other thing I can find on this exact issue I''m having. Nigel - do you have any idea if the fixes have ever made it into a 2.7.x release? I''m using 2.7.20 (as that''s what is used in our non-OSX hosts) and still getting this same error. Thanks! Doug On Wednesday, September 7, 2011 8:07:00 AM UTC-5, Nigel Kersten wrote:> > > > On Tue, Sep 6, 2011 at 12:42 PM, James Turnbull <ja...@puppetlabs.com<javascript:> > > wrote: > >> David Thompson wrote: >> > Switching to puppet (2.7.3) for managing my OS X Lion systems, I''m >> > finding group membership not being updated. >> > >> > >> > Any help much appreciated... >> > >> >> David >> >> I think there are a bunch of OSX Lion bugs in the ticket DB that might >> be worth checking if this one is picked up. We''ve got code for some and >> need to do some refactoring for others. >> >> > So that people understand, Apple have changed a bunch of things around > DirectoryServices that caused our provider to break under Lion. > > I just got Lion installed recently on my laptop, and I''m planning to churn > through these issues in the next few days, targeting the fixes at 2.7.x. > > > > > -- > Nigel Kersten > Product Manager, Puppet Labs > > *Join us for **PuppetConf * > <http://www.bit.ly/puppetconfsig> > Sept 22/23 Portland, Oregon, USA. > * > * > >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
Gary Larizza
2013-Jan-26 21:20 UTC
Re: [Puppet Users] OS X Lion group membership not updated
Hi Doug, Yep, I did the work on that and it was merged in around 2.7.10, I believe --> http://projects.puppetlabs.com/issues/11293 Can you provide me with what specific error you''re getting, the version of OS X you''re running, and the versions of Facter/Puppet you''re using? On Fri, Jan 25, 2013 at 2:33 PM, <doug@ebackpack.com> wrote:> Sorry to revive an old thread, but this seems to be the only other thing I > can find on this exact issue I''m having. > > Nigel - do you have any idea if the fixes have ever made it into a 2.7.x > release? I''m using 2.7.20 (as that''s what is used in our non-OSX hosts) and > still getting this same error. > > Thanks! > > Doug > > On Wednesday, September 7, 2011 8:07:00 AM UTC-5, Nigel Kersten wrote: > >> >> >> On Tue, Sep 6, 2011 at 12:42 PM, James Turnbull <ja...@puppetlabs.com>wrote: >> >>> David Thompson wrote: >>> > Switching to puppet (2.7.3) for managing my OS X Lion systems, I''m >>> > finding group membership not being updated. >>> > >>> > >>> > Any help much appreciated... >>> > >>> >>> David >>> >>> I think there are a bunch of OSX Lion bugs in the ticket DB that might >>> be worth checking if this one is picked up. We''ve got code for some and >>> need to do some refactoring for others. >>> >>> >> So that people understand, Apple have changed a bunch of things around >> DirectoryServices that caused our provider to break under Lion. >> >> I just got Lion installed recently on my laptop, and I''m planning to >> churn through these issues in the next few days, targeting the fixes at >> 2.7.x. >> >> >> >> >> -- >> Nigel Kersten >> Product Manager, Puppet Labs >> >> *Join us for **PuppetConf * >> <http://www.bit.ly/**puppetconfsig <http://www.bit.ly/puppetconfsig>> >> Sept 22/23 Portland, Oregon, USA. >> * >> * >> >> -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to > puppet-users+unsubscribe@googlegroups.com. > Visit this group at http://groups.google.com/group/puppet-users?hl=en. > For more options, visit https://groups.google.com/groups/opt_out. > > >-- Gary Larizza Professional Services Engineer -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
Doug Mayer
2013-Jan-28 22:38 UTC
Re: [Puppet Users] OS X Lion group membership not updated
Hi Gary, Thanks for the response. I am running Facter v1.6.17 and Puppet v2.7.20 (both are the latest versions for Ubuntu 12 LTS, so I wanted to run the same version on OS X if possible). Running OS X Server v10.7.5. Every time I run, it says that it changes the groups (it always says it was "") but it seems they''re never actually persisted. Both the admin and sudo groups listed exist. I didn''t specify a uid/gid for the user or the groups, so they''re the default low IDs, making it impossible to inspect through the UI (I think they only show UIDs > 500)--I''ve not been able to determine yet if that has any effect on it. * [my.server.net] notice: /Stage[main]/User::Virtual/User::Virtual::Ssh_user[doug]/User[doug]/groups: groups changed '''' to ''admin,sudo'' * [my.server.net] notice: Finished catalog run in 1.26 seconds Thanks! Doug On Sat, Jan 26, 2013 at 3:20 PM, Gary Larizza <gary@puppetlabs.com> wrote:> Hi Doug, > > Yep, I did the work on that and it was merged in around 2.7.10, I believe > --> http://projects.puppetlabs.com/issues/11293 > > Can you provide me with what specific error you''re getting, the version of > OS X you''re running, and the versions of Facter/Puppet you''re using? > > > On Fri, Jan 25, 2013 at 2:33 PM, <doug@ebackpack.com> wrote: > >> Sorry to revive an old thread, but this seems to be the only other thing >> I can find on this exact issue I''m having. >> >> Nigel - do you have any idea if the fixes have ever made it into a 2.7.x >> release? I''m using 2.7.20 (as that''s what is used in our non-OSX hosts) and >> still getting this same error. >> >> Thanks! >> >> Doug >> >> On Wednesday, September 7, 2011 8:07:00 AM UTC-5, Nigel Kersten wrote: >> >>> >>> >>> On Tue, Sep 6, 2011 at 12:42 PM, James Turnbull <ja...@puppetlabs.com>wrote: >>> >>>> David Thompson wrote: >>>> > Switching to puppet (2.7.3) for managing my OS X Lion systems, I''m >>>> > finding group membership not being updated. >>>> > >>>> > >>>> > Any help much appreciated... >>>> > >>>> >>>> David >>>> >>>> I think there are a bunch of OSX Lion bugs in the ticket DB that might >>>> be worth checking if this one is picked up. We''ve got code for some and >>>> need to do some refactoring for others. >>>> >>>> >>> So that people understand, Apple have changed a bunch of things around >>> DirectoryServices that caused our provider to break under Lion. >>> >>> I just got Lion installed recently on my laptop, and I''m planning to >>> churn through these issues in the next few days, targeting the fixes at >>> 2.7.x. >>> >>> >>> >>> >>> -- >>> Nigel Kersten >>> Product Manager, Puppet Labs >>> >>> *Join us for **PuppetConf * >>> <http://www.bit.ly/**puppetconfsig <http://www.bit.ly/puppetconfsig>> >>> Sept 22/23 Portland, Oregon, USA. >>> * >>> * >>> >>> -- >> You received this message because you are subscribed to the Google Groups >> "Puppet Users" group. >> To post to this group, send email to puppet-users@googlegroups.com. >> To unsubscribe from this group, send email to >> puppet-users+unsubscribe@googlegroups.com. >> Visit this group at http://groups.google.com/group/puppet-users?hl=en. >> For more options, visit https://groups.google.com/groups/opt_out. >> >> >> > > > > -- > Gary Larizza > Professional Services Engineer > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to > puppet-users+unsubscribe@googlegroups.com. > Visit this group at http://groups.google.com/group/puppet-users?hl=en. > For more options, visit https://groups.google.com/groups/opt_out. > > >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
Doug Mayer
2013-Feb-18 16:28 UTC
Re: [Puppet Users] OS X Lion group membership not updated
Hi Gary, Any other thoughts on what could be going on here? I''m afraid I haven''t made any further progress on it, and am at a bit of a loss. Any suggestions you or anyone else may have would be greatly appreciated! Thanks, Doug On Mon, Jan 28, 2013 at 4:38 PM, Doug Mayer <doug@ebackpack.com> wrote:> > Hi Gary, > > Thanks for the response. I am running Facter v1.6.17 and Puppet v2.7.20 > (both are the latest versions for Ubuntu 12 LTS, so I wanted to run the > same version on OS X if possible). Running OS X Server v10.7.5. > > Every time I run, it says that it changes the groups (it always says it > was "") but it seems they''re never actually persisted. Both the admin and > sudo groups listed exist. I didn''t specify a uid/gid for the user or the > groups, so they''re the default low IDs, making it impossible to inspect > through the UI (I think they only show UIDs > 500)--I''ve not been able to > determine yet if that has any effect on it. > > * [my.server.net] notice: > /Stage[main]/User::Virtual/User::Virtual::Ssh_user[doug]/User[doug]/groups: > groups changed '''' to ''admin,sudo'' > * [my.server.net] notice: Finished catalog run in 1.26 seconds > > Thanks! > > Doug > > > On Sat, Jan 26, 2013 at 3:20 PM, Gary Larizza <gary@puppetlabs.com> wrote: > >> Hi Doug, >> >> Yep, I did the work on that and it was merged in around 2.7.10, I believe >> --> http://projects.puppetlabs.com/issues/11293 >> >> Can you provide me with what specific error you''re getting, the version >> of OS X you''re running, and the versions of Facter/Puppet you''re using? >> >> >> On Fri, Jan 25, 2013 at 2:33 PM, <doug@ebackpack.com> wrote: >> >>> Sorry to revive an old thread, but this seems to be the only other thing >>> I can find on this exact issue I''m having. >>> >>> Nigel - do you have any idea if the fixes have ever made it into a 2.7.x >>> release? I''m using 2.7.20 (as that''s what is used in our non-OSX hosts) and >>> still getting this same error. >>> >>> Thanks! >>> >>> Doug >>> >>> On Wednesday, September 7, 2011 8:07:00 AM UTC-5, Nigel Kersten wrote: >>> >>>> >>>> >>>> On Tue, Sep 6, 2011 at 12:42 PM, James Turnbull <ja...@puppetlabs.com>wrote: >>>> >>>>> David Thompson wrote: >>>>> > Switching to puppet (2.7.3) for managing my OS X Lion systems, I''m >>>>> > finding group membership not being updated. >>>>> > >>>>> > >>>>> > Any help much appreciated... >>>>> > >>>>> >>>>> David >>>>> >>>>> I think there are a bunch of OSX Lion bugs in the ticket DB that might >>>>> be worth checking if this one is picked up. We''ve got code for some and >>>>> need to do some refactoring for others. >>>>> >>>>> >>>> So that people understand, Apple have changed a bunch of things around >>>> DirectoryServices that caused our provider to break under Lion. >>>> >>>> I just got Lion installed recently on my laptop, and I''m planning to >>>> churn through these issues in the next few days, targeting the fixes at >>>> 2.7.x. >>>> >>>> >>>> >>>> >>>> -- >>>> Nigel Kersten >>>> Product Manager, Puppet Labs >>>> >>>> *Join us for **PuppetConf * >>>> <http://www.bit.ly/**puppetconfsig <http://www.bit.ly/puppetconfsig>> >>>> Sept 22/23 Portland, Oregon, USA. >>>> * >>>> * >>>> >>>> -- >>> You received this message because you are subscribed to the Google >>> Groups "Puppet Users" group. >>> To post to this group, send email to puppet-users@googlegroups.com. >>> To unsubscribe from this group, send email to >>> puppet-users+unsubscribe@googlegroups.com. >>> Visit this group at http://groups.google.com/group/puppet-users?hl=en. >>> For more options, visit https://groups.google.com/groups/opt_out. >>> >>> >>> >> >> >> >> -- >> Gary Larizza >> Professional Services Engineer >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Puppet Users" group. >> To post to this group, send email to puppet-users@googlegroups.com. >> To unsubscribe from this group, send email to >> puppet-users+unsubscribe@googlegroups.com. >> Visit this group at http://groups.google.com/group/puppet-users?hl=en. >> For more options, visit https://groups.google.com/groups/opt_out. >> >> >> > >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.