I''m preparing a puppet rollout to manage >1000 mac laptops. In the testbed, puppetd is not behaving as I''d expect. On both system1 and 2 I''ve installed puppet (0.24.4) and facter using the gem install method. system1 # id puppet id: puppet: no such user # /usr/bin/puppetd --verbose --debug --no-daemonize ... err: /Settings[top]/Settings[main]/File[/var/puppet/run]: Failed to retrieve current state of resource: Could not find user puppet ... system2 # id puppet uid=4294967294(puppet) gid=4294967294(nobody) groups=4294967294(nobody) # /usr/bin/puppetd --verbose --debug --no-daemonize ... warning: /Settings[top]/Settings[main]/File[/var/puppet/run]/owner: Apparently using negative UID (4294967294) on a platform that does not consistently handle them ... (but otherwise seems to operate normally) Now back on system1.. system1 # puppetmasterd --mkusers --no-daemonize Could not configure for running; got 1 failure(s) # id puppet uid=4294967294(puppet) gid=4294967294(nobody) groups=4294967294(nobody) # /usr/bin/puppetd --verbose --debug --no-daemonize ... err: /Settings[top]/Settings[main]/File[/var/puppet/run]: Failed to retrieve current state of resource: Could not find group puppet ... So system2 doesn''t care that puppet user is in the nobody group, and system1 DOES. What I am asking is how to properly create the puppet user/group on Darwin so that it runs right every time. Is puppetmasterd --mkusers really the way to go? Thanks. -- Mark Foster - Sr. Systems Engineer BitPusher - premier managed services provider http://www.bitpusher.com/ --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com To unsubscribe from this group, send email to puppet-users-unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en -~----------~----~----~----~------~----~------~--~---
On Apr 24, 2008, at 11:27 AM, Mark Foster wrote:> So system2 doesn''t care that puppet user is in the nobody group, and > system1 DOES. > What I am asking is how to properly create the puppet user/group on > Darwin so that it runs right every time. Is puppetmasterd --mkusers > really the way to go?The directoryservice user provider is still not quite nailed, so this might be the problem. There is a filed bug on something related to users and the directoryservice provider, but I haven''t looked at it in a while. Jeff McCune wrote the provider, and I haven''t yet gone through and made sure it really works all the way, although I''ve confirmed it seems to work for *most* things, anyway. Jeff has kinda dropped off a bit since he switched jobs, so it''d be great to have at least one more person invested in the OS X platform. -- The Chico, California, City Council enacted a ban on nuclear weapons, setting a $500 fine for anyone detonating one within city limits. --------------------------------------------------------------------- Luke Kanies | http://reductivelabs.com | http://madstop.com --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com To unsubscribe from this group, send email to puppet-users-unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en -~----------~----~----~----~------~----~------~--~---
On Thu, Apr 24, 2008 at 4:16 PM, Luke Kanies <luke@madstop.com> wrote:> > On Apr 24, 2008, at 11:27 AM, Mark Foster wrote: > > > So system2 doesn''t care that puppet user is in the nobody group, and > > system1 DOES. > > What I am asking is how to properly create the puppet user/group on > > Darwin so that it runs right every time. Is puppetmasterd --mkusers > > really the way to go? > > > The directoryservice user provider is still not quite nailed, so this > might be the problem. >I don''t actually have the puppet user/group on any of my Mac clients Mark, so I hadn''t even thought about this as a bug. Do you need the puppet user and gorup? Are you only targeting 10.5 or 10.4 as well? -- Nigel Kersten Systems Administrator MacOps --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com To unsubscribe from this group, send email to puppet-users-unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en -~----------~----~----~----~------~----~------~--~---
On Apr 24, 2008, at 8:14 PM, Nigel Kersten wrote:> I don''t actually have the puppet user/group on any of my Mac clients > Mark, so I hadn''t even thought about this as a bug. > > Do you need the puppet user and gorup? Are you only targeting 10.5 > or 10.4 as well?You shouldn''t need the user/group, but it seems to have crept in for some cases. 10.4 should still work. -- Today I dialed a wrong number...The other person said, "Hello?" and I said, "Hello, could I speak to Joey?"... They said, "Uh...I don''t think so...he''s only 2 months old." I said, "I''ll wait." -- Steven Wright --------------------------------------------------------------------- Luke Kanies | http://reductivelabs.com | http://madstop.com --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com To unsubscribe from this group, send email to puppet-users-unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en -~----------~----~----~----~------~----~------~--~---
On Thu, Apr 24, 2008 at 7:39 PM, Luke Kanies <luke@madstop.com> wrote:> > On Apr 24, 2008, at 8:14 PM, Nigel Kersten wrote: > > > I don''t actually have the puppet user/group on any of my Mac clients > > Mark, so I hadn''t even thought about this as a bug. > > > > Do you need the puppet user and gorup? Are you only targeting 10.5 > > or 10.4 as well? > > > You shouldn''t need the user/group, but it seems to have crept in for > some cases. 10.4 should still work. >Do the installers on other platforms automatically create the user and group? -- Nigel Kersten Systems Administrator MacOps --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com To unsubscribe from this group, send email to puppet-users-unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en -~----------~----~----~----~------~----~------~--~---
On Apr 24, 2008, at 9:48 PM, Nigel Kersten wrote:> Do the installers on other platforms automatically create the user > and group?The other platforms have these crazy modern things called "packages", and those "packages" do install the user and group, yes. -- That was just a drill of the emergency y2k system. Had this been a real emergency, we would''ve also dumped a bucket of spiders on you and yelled out "civilization is collapsing!" --------------------------------------------------------------------- Luke Kanies | http://reductivelabs.com | http://madstop.com --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com To unsubscribe from this group, send email to puppet-users-unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en -~----------~----~----~----~------~----~------~--~---
On Thu, Apr 24, 2008 at 7:52 PM, Luke Kanies <luke@madstop.com> wrote:> > On Apr 24, 2008, at 9:48 PM, Nigel Kersten wrote: > > > Do the installers on other platforms automatically create the user > > and group? > > > The other platforms have these crazy modern things called "packages", > and those "packages" do install the user and group, yes.No need to rub it in :) We have packages on Macs too, they just suck. will get something together. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com To unsubscribe from this group, send email to puppet-users-unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en -~----------~----~----~----~------~----~------~--~---
On Apr 24, 2008, at 10:03 PM, Nigel Kersten wrote:> > On Thu, Apr 24, 2008 at 7:52 PM, Luke Kanies <luke@madstop.com> wrote: > > On Apr 24, 2008, at 9:48 PM, Nigel Kersten wrote: > > > Do the installers on other platforms automatically create the user > > and group? > > > The other platforms have these crazy modern things called "packages", > and those "packages" do install the user and group, yes. > > No need to rub it in :) We have packages on Macs too, they just suck.I *tried* to fight the sarcasm, I really did. :)> > will get something together.Cool. -- Hegel was right when he said that we learn from history that man can never learn anything from history. -- George Bernard Shaw --------------------------------------------------------------------- Luke Kanies | http://reductivelabs.com | http://madstop.com --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com To unsubscribe from this group, send email to puppet-users-unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en -~----------~----~----~----~------~----~------~--~---