Sergey Arlashin
2013-Nov-26 15:36 UTC
[Puppet Users] puppet won''t change user''s password
Hi!
I''m trying to set password for a user.
I do the following:
user { "username":
password => ''*'',
}
And when I run puppet agent nothing happens. The password remains the same. But
if I create a new user which doesn''t exist yet, the password is set
without any problems.
Is this a normal behaviour of ''user'' type?
--
Best regards,
Sergey Arlashin
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/E932E656-33B5-4FBB-ADD3-F069DCF99B3C%40gmail.com.
For more options, visit https://groups.google.com/groups/opt_out.
Felix Frank
2013-Nov-27 10:32 UTC
Re: [Puppet Users] puppet won''t change user''s password
Hi,
no, it''s not. What version of puppet are you using?
To make sure there is nothing funny going on with your overall manifest
structure, can you try this as root on the agent machine:
puppet apply -e ''user { "username": password =>
"*" }''
For me, this yields
Notice: /User[username]/password: changed password
Notice: Finished catalog run in 0.53 seconds
This is puppet 3.3.1.
TIA,
Felix
On 11/26/2013 04:36 PM, Sergey Arlashin wrote:> Hi!
>
> I''m trying to set password for a user.
>
> I do the following:
>
> user { "username":
> password => ''*'',
> }
>
> And when I run puppet agent nothing happens. The password remains the same.
But if I create a new user which doesn''t exist yet, the password is set
without any problems.
>
> Is this a normal behaviour of ''user'' type?
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/5295CA2A.1050102%40alumni.tu-berlin.de.
For more options, visit https://groups.google.com/groups/opt_out.
Sergey Arlashin
2013-Nov-27 10:57 UTC
Re: [Puppet Users] puppet won''t change user''s password
# uname -a
Linux db-node2 3.2.0-55-generic #85-Ubuntu SMP Wed Oct 2 12:29:27 UTC 2013
x86_64 x86_64 x86_64 GNU/Linux
# cat /etc/issue
Ubuntu 12.04.3 LTS \n \l
# puppet -V
3.3.2
# cat /etc/passwd |grep ^testuser
testuser:x:1002:1002::/home/testuser:/bin/sh
# cat /etc/shadow |grep ^testuser
testuser:$6$.JNdUYPK$KUcfD3urk5290LvluOE.wnCKoEibMqd2.uiT/X0ezS29JaXfk4T9K57ea/6mSU7Z/8ppi8IiNNV7bkVYc5p0s0:16036:0:99999:7:::
# puppet apply -e ''user { "testuser": password =>
"*" }''
Notice: Compiled catalog for db-node2.site in environment production in 0.07
seconds
Notice: Finished catalog run in 0.08 seconds
# cat /etc/shadow |grep ^testuser
testuser:$6$.JNdUYPK$KUcfD3urk5290LvluOE.wnCKoEibMqd2.uiT/X0ezS29JaXfk4T9K57ea/6mSU7Z/8ppi8IiNNV7bkVYc5p0s0:16036:0:99999:7:::
--
Best regards,
Sergey Arlashin
On Nov 27, 2013, at 2:32 PM, Felix Frank <felix.frank@alumni.tu-berlin.de>
wrote:
> Hi,
>
> no, it''s not. What version of puppet are you using?
>
> To make sure there is nothing funny going on with your overall manifest
> structure, can you try this as root on the agent machine:
>
> puppet apply -e ''user { "username": password =>
"*" }''
>
> For me, this yields
>
> Notice: /User[username]/password: changed password
> Notice: Finished catalog run in 0.53 seconds
>
> This is puppet 3.3.1.
>
> TIA,
> Felix
>
> On 11/26/2013 04:36 PM, Sergey Arlashin wrote:
>> Hi!
>>
>> I''m trying to set password for a user.
>>
>> I do the following:
>>
>> user { "username":
>> password => ''*'',
>> }
>>
>> And when I run puppet agent nothing happens. The password remains the
same. But if I create a new user which doesn''t exist yet, the password
is set without any problems.
>>
>> Is this a normal behaviour of ''user'' type?
>
> --
> You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
email to puppet-users+unsubscribe@googlegroups.com.
> To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/5295CA2A.1050102%40alumni.tu-berlin.de.
> For more options, visit https://groups.google.com/groups/opt_out.
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/2689FC78-CD82-4ECF-A3F4-8B66DD2667ED%40gmail.com.
For more options, visit https://groups.google.com/groups/opt_out.
Felix Frank
2013-Nov-27 11:00 UTC
Re: [Puppet Users] puppet won''t change user''s password
Ugh. So, does it work with other values (e.g., actual password hashes)? On 11/27/2013 11:57 AM, Sergey Arlashin wrote:> > # puppet apply -e ''user { "testuser": password => "*" }'' > Notice: Compiled catalog for db-node2.site in environment production in 0.07 seconds > Notice: Finished catalog run in 0.08 seconds > > # cat /etc/shadow |grep ^testuser > testuser:$6$.JNdUYPK$KUcfD3urk5290LvluOE.wnCKoEibMqd2.uiT/X0ezS29JaXfk4T9K57ea/6mSU7Z/8ppi8IiNNV7bkVYc5p0s0:16036:0:99999:7:::-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/5295D0C3.6090306%40alumni.tu-berlin.de. For more options, visit https://groups.google.com/groups/opt_out.
Sergey Arlashin
2013-Nov-27 11:02 UTC
Re: [Puppet Users] puppet won''t change user''s password
# puppet apply -e ''user { "testuser": password =>
"$6$MhRLkUTo$9RhLb3AfsO4HSxeHdLOLCPBj7LRH6vGOx1zPcvpfVRGOuJPczjEyaYoS3SyQ6MESctWarz2VDhD4ZT9wHe61v/"
}''
Notice: Compiled catalog for db-node2.site in environment production in 0.07
seconds
Notice: Finished catalog run in 0.06 seconds
Best regards,
Sergey Arlashin
On Nov 27, 2013, at 3:00 PM, Felix Frank <felix.frank@alumni.tu-berlin.de>
wrote:
> Ugh. So, does it work with other values (e.g., actual password hashes)?
>
> On 11/27/2013 11:57 AM, Sergey Arlashin wrote:
>>
>> # puppet apply -e ''user { "testuser": password =>
"*" }''
>> Notice: Compiled catalog for db-node2.site in environment production in
0.07 seconds
>> Notice: Finished catalog run in 0.08 seconds
>>
>> # cat /etc/shadow |grep ^testuser
>>
testuser:$6$.JNdUYPK$KUcfD3urk5290LvluOE.wnCKoEibMqd2.uiT/X0ezS29JaXfk4T9K57ea/6mSU7Z/8ppi8IiNNV7bkVYc5p0s0:16036:0:99999:7:::
>
> --
> You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
email to puppet-users+unsubscribe@googlegroups.com.
> To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/5295D0C3.6090306%40alumni.tu-berlin.de.
> For more options, visit https://groups.google.com/groups/opt_out.
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/CD1DE611-372E-4D93-9419-598FF52B663E%40gmail.com.
For more options, visit https://groups.google.com/groups/opt_out.
Felix Frank
2013-Nov-27 11:05 UTC
Re: [Puppet Users] puppet won''t change user''s password
Hi, no good then. Please run again with an added -dv switch to puppet apply, and share the debug output. Thanks in advance. On 11/27/2013 12:02 PM, Sergey Arlashin wrote:> # puppet apply -e ''user { "testuser": password => "$6$MhRLkUTo$9RhLb3AfsO4HSxeHdLOLCPBj7LRH6vGOx1zPcvpfVRGOuJPczjEyaYoS3SyQ6MESctWarz2VDhD4ZT9wHe61v/" }'' > Notice: Compiled catalog for db-node2.site in environment production in 0.07 seconds > Notice: Finished catalog run in 0.06 seconds > > Best regards, > Sergey Arlashin-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/5295D1DE.5030106%40alumni.tu-berlin.de. For more options, visit https://groups.google.com/groups/opt_out.
Sergey Arlashin
2013-Nov-27 11:12 UTC
Re: [Puppet Users] puppet won''t change user''s password
Seems to be useradd issue..
Debug: /User[testuser]: Provider useradd does not support features
manages_passwords; not managing attribute password
http://docs.puppetlabs.com/references/latest/type.html#user-provider-useradd:
"useradd
User management via useradd and its ilk. Note that you will need to install
Ruby’s shadow password library (often known as ruby-libshadow) if you wish to
manage user passwords."
So I installed libshadow and everything''s working now!
# puppet apply -e ''user { "testuser": password =>
"*" }''
Notice: Compiled catalog for db-node2.site in environment production in 0.08
seconds
Notice: /User[testuser]/password: changed password
Notice: Finished catalog run in 0.13 seconds
Thank you!
--
Best regards,
Sergey Arlashin
On Nov 27, 2013, at 3:05 PM, Felix Frank <felix.frank@alumni.tu-berlin.de>
wrote:
> Hi,
>
> no good then.
>
> Please run again with an added -dv switch to puppet apply, and share the
> debug output.
>
> Thanks in advance.
>
> On 11/27/2013 12:02 PM, Sergey Arlashin wrote:
>> # puppet apply -e ''user { "testuser": password =>
"$6$MhRLkUTo$9RhLb3AfsO4HSxeHdLOLCPBj7LRH6vGOx1zPcvpfVRGOuJPczjEyaYoS3SyQ6MESctWarz2VDhD4ZT9wHe61v/"
}''
>> Notice: Compiled catalog for db-node2.site in environment production in
0.07 seconds
>> Notice: Finished catalog run in 0.06 seconds
>>
>> Best regards,
>> Sergey Arlashin
>
> --
> You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
email to puppet-users+unsubscribe@googlegroups.com.
> To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/5295D1DE.5030106%40alumni.tu-berlin.de.
> For more options, visit https://groups.google.com/groups/opt_out.
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/CBD5BDE1-3EF8-4004-8552-D1D898161113%40gmail.com.
For more options, visit https://groups.google.com/groups/opt_out.
Felix Frank
2013-Nov-27 11:16 UTC
Re: [Puppet Users] puppet won''t change user''s password
Way to go! On 11/27/2013 12:12 PM, Sergey Arlashin wrote:> So I installed libshadow and everything''s working now!-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/5295D4A9.9070101%40alumni.tu-berlin.de. For more options, visit https://groups.google.com/groups/opt_out.
Felix Frank
2013-Nov-27 11:58 UTC
Re: [Puppet Users] puppet won''t change user''s password
Hi Dan, I hope this was indeed intended for the list, seeing as I just received two messages from you to me directly. Something wonky on your end? As for the issue below - in the OP''s case, *no* run ever lead to a change of passwords. Cheers, Felix On 11/27/2013 12:46 PM, ygor@comcast.net wrote:> Why do you expect a password change on the second run ? > > From my observations, the parameter value has not changed between runs, so there is nothing to change. > > -----Original Message----- > From: Felix Frank > To: puppet-users > Sent: November 27, 2013 at 5:32 AM > Subject: Re: [Puppet Users] puppet won''t change user''s password > > Hi, > > no, it''s not. What version of puppet are you using? > > To make sure there is nothing funny going on with your overall manifest > structure, can you try this as root on the agent machine: > > puppet apply -e ''user { "username": password => "*" }'' > > For me, this yields > > Notice: /User[username]/password: changed password > Notice: Finished catalog run in 0.53 seconds > > This is puppet 3.3.1. > > TIA, > Felix > > On 11/26/2013 04:36 PM, Sergey Arlashin wrote: >> > Hi! >>> >> I''m trying to set password for a user. >>> >> I do the following: >>> >> user { "username": >> > password => ''*'', >> > } >>> >> And when I run puppet agent nothing happens. The password remains the same. But if I create a new user which doesn''t exist yet, the password is set without any problems. >>> >> Is this a normal behaviour of ''user'' type?-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/5295DE69.80104%40alumni.tu-berlin.de. For more options, visit https://groups.google.com/groups/opt_out.
Just my attention-to-detail before sufficient coffee :P I see down the thread that this was fixed. “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.” Bill Waterson (Calvin & Hobbes) ----- Original Message ----- From: "Felix Frank" <felix.frank@alumni.tu-berlin.de> To: "Puppet Users" <puppet-users@googlegroups.com> Sent: Wednesday, November 27, 2013 6:58:33 AM Subject: Re: [Puppet Users] puppet won''t change user''s password Hi Dan, I hope this was indeed intended for the list, seeing as I just received two messages from you to me directly. Something wonky on your end? As for the issue below - in the OP''s case, *no* run ever lead to a change of passwords. Cheers, Felix On 11/27/2013 12:46 PM, ygor@comcast.net wrote:> Why do you expect a password change on the second run ? > > From my observations, the parameter value has not changed between runs, so there is nothing to change. > > -----Original Message----- > From: Felix Frank > To: puppet-users > Sent: November 27, 2013 at 5:32 AM > Subject: Re: [Puppet Users] puppet won''t change user''s password > > Hi, > > no, it''s not. What version of puppet are you using? > > To make sure there is nothing funny going on with your overall manifest > structure, can you try this as root on the agent machine: > > puppet apply -e ''user { "username": password => "*" }'' > > For me, this yields > > Notice: /User[username]/password: changed password > Notice: Finished catalog run in 0.53 seconds > > This is puppet 3.3.1. > > TIA, > Felix > > On 11/26/2013 04:36 PM, Sergey Arlashin wrote: >> > Hi! >>> >> I''m trying to set password for a user. >>> >> I do the following: >>> >> user { "username": >> > password => ''*'', >> > } >>> >> And when I run puppet agent nothing happens. The password remains the same. But if I create a new user which doesn''t exist yet, the password is set without any problems. >>> >> Is this a normal behaviour of ''user'' type?-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/5295DE69.80104%40alumni.tu-berlin.de. For more options, visit https://groups.google.com/groups/opt_out. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/463767999.4761063.1385556227509.JavaMail.root%40sz0126a.westchester.pa.mail.comcast.net. For more options, visit https://groups.google.com/groups/opt_out.