thr3ads.net - Puppet users - [Puppet Users] password attribute for users [May 2008]

If this information is useful, please help other people find it:
Share via:

Marcel Levy

2008-May-23 16:32 UTC

[Puppet Users] password attribute for users

I''m trying to use the "password" parameter for users on a set
of
workstations running Centos 5.1, but I''m getting an error.
I''ve
included some debugging output:

debug: getting config
debug: Calling puppetmaster.getconfig
err: Could not retrieve configuration: Invalid parameter
'':password''
for type ''user'' in file /etc/puppet/manifests/classes/sybyl.pp
at line
15

Here''s the sybyl.pp file:

class sybyl {
    include ruby-shadow
    package { mesa-libGLU: ensure => installed }
    package { libXmu: ensure => installed }
    package { libXpm: ensure => installed }
    package { libXp: ensure => installed }
    user { "tripos":
        password => ''<password hash snipped>'',
        ensure => "present",
        uid     => 10000,
        gid     => 10000,
        comment => "Tripos user",
        home => "/home/tripos",
        shell => "/bin/bash"
    }
    group { "tripos":
        ensure => "present",
        gid => 10000
    }
}


I also inserted a backtrace at the point the exception occurs, in
"network/client/master.rb," line 645 . Here''s the backtrace:

/usr/lib/ruby/site_ruby/1.8/puppet/network/xmlrpc/client.rb:52:in
`getconfig''
/usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:587:in
`get_remote_config''
/usr/lib/ruby/site_ruby/1.8/puppet/util.rb:212:in `benchmark''
/usr/lib/ruby/1.8/benchmark.rb:293:in `measure''
/usr/lib/ruby/1.8/benchmark.rb:307:in `realtime''
/usr/lib/ruby/site_ruby/1.8/puppet/util.rb:211:in `benchmark''
/usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:584:in
`get_remote_config''
/usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:555:in
`get_actual_config''
/usr/lib/ruby/1.8/timeout.rb:48:in `timeout''
/usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:554:in
`get_actual_config''
/usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:204:in
`getconfig''
/usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:298:in
`run''
/usr/lib/ruby/site_ruby/1.8/puppet/util.rb:434:in `thinmark''
/usr/lib/ruby/1.8/benchmark.rb:293:in `measure''
/usr/lib/ruby/1.8/benchmark.rb:307:in `realtime''
/usr/lib/ruby/site_ruby/1.8/puppet/util.rb:433:in `thinmark''
/usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:297:in
`run''
/usr/lib/ruby/1.8/sync.rb:229:in `synchronize''
/usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:291:in
`run''
/usr/sbin/puppetd:425

I''ve found several contradictory references to useradd, which is the
provider I''m using. The type reference [1] says that it
doesn''t have
the "manages_passwords" feature, but there are several pages [2,3]
that indicate that it will work, as long as libshadow is installed.
I''ve installed it from RPMforge, and I confirmed that it works via
irb.

Any ideas or help would be much appreciated.

Thanks,
-Marcel Levy <mlevy@unr.edu>
Bioinformatics Specialist,
Center for Bioinformatics
University of Nevada, Reno


[1] http://reductivelabs.com/trac/puppet/wiki/TypeReference#id199
[2] http://reductivelabs.com/trac/puppet/wiki/PuppetRedHatCentos
[3]
http://www.raskas.be/blog/2007/09/10/managing-user-passwords-with-puppet-on-centos/

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Ashley Penney

2008-May-23 17:39 UTC

head link

[Puppet Users] Re: password attribute for users

Ensure you have the ruby-shadow library installed also, otherwise it cannot
handle passwords for some reason.

On Fri, May 23, 2008 at 12:32 PM, Marcel Levy <heymarcel@gmail.com> wrote:
>
> I''m trying to use the "password" parameter for users on
a set of
> workstations running Centos 5.1, but I''m getting an error.
I''ve
> included some debugging output:
>
> debug: getting config
> debug: Calling puppetmaster.getconfig
> err: Could not retrieve configuration: Invalid parameter
'':password''
> for type ''user'' in file
/etc/puppet/manifests/classes/sybyl.pp at line
> 15
>
> Here''s the sybyl.pp file:
>
> class sybyl {
>    include ruby-shadow
>    package { mesa-libGLU: ensure => installed }
>    package { libXmu: ensure => installed }
>    package { libXpm: ensure => installed }
>    package { libXp: ensure => installed }
>    user { "tripos":
>        password => ''<password hash snipped>'',
>        ensure => "present",
>        uid     => 10000,
>        gid     => 10000,
>        comment => "Tripos user",
>        home => "/home/tripos",
>        shell => "/bin/bash"
>    }
>    group { "tripos":
>        ensure => "present",
>        gid => 10000
>    }
> }
>
>
> I also inserted a backtrace at the point the exception occurs, in
> "network/client/master.rb," line 645 . Here''s the
backtrace:
>
> /usr/lib/ruby/site_ruby/1.8/puppet/network/xmlrpc/client.rb:52:in
> `getconfig''
> /usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:587:in
> `get_remote_config''
> /usr/lib/ruby/site_ruby/1.8/puppet/util.rb:212:in `benchmark''
> /usr/lib/ruby/1.8/benchmark.rb:293:in `measure''
> /usr/lib/ruby/1.8/benchmark.rb:307:in `realtime''
> /usr/lib/ruby/site_ruby/1.8/puppet/util.rb:211:in `benchmark''
> /usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:584:in
> `get_remote_config''
> /usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:555:in
> `get_actual_config''
> /usr/lib/ruby/1.8/timeout.rb:48:in `timeout''
> /usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:554:in
> `get_actual_config''
> /usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:204:in
> `getconfig''
> /usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:298:in
`run''
> /usr/lib/ruby/site_ruby/1.8/puppet/util.rb:434:in `thinmark''
> /usr/lib/ruby/1.8/benchmark.rb:293:in `measure''
> /usr/lib/ruby/1.8/benchmark.rb:307:in `realtime''
> /usr/lib/ruby/site_ruby/1.8/puppet/util.rb:433:in `thinmark''
> /usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:297:in
`run''
> /usr/lib/ruby/1.8/sync.rb:229:in `synchronize''
> /usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:291:in
`run''
> /usr/sbin/puppetd:425
>
> I''ve found several contradictory references to useradd, which is
the
> provider I''m using. The type reference [1] says that it
doesn''t have
> the "manages_passwords" feature, but there are several pages
[2,3]
> that indicate that it will work, as long as libshadow is installed.
> I''ve installed it from RPMforge, and I confirmed that it works via
> irb.
>
> Any ideas or help would be much appreciated.
>
> Thanks,
> -Marcel Levy <mlevy@unr.edu>
> Bioinformatics Specialist,
> Center for Bioinformatics
> University of Nevada, Reno
>
>
> [1] http://reductivelabs.com/trac/puppet/wiki/TypeReference#id199
> [2] http://reductivelabs.com/trac/puppet/wiki/PuppetRedHatCentos
> [3]
>
http://www.raskas.be/blog/2007/09/10/managing-user-passwords-with-puppet-on-centos/
>
> >
>
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Marcel Levy

2008-May-23 18:17 UTC

head link

[Puppet Users] Re: password attribute for users

Yeah, it''s installed, but it still doesn''t work.

On Fri, May 23, 2008 at 10:39 AM, Ashley Penney <apenney@gmail.com>
wrote:> Ensure you have the ruby-shadow library installed also, otherwise it cannot
> handle passwords for some reason.
>
> On Fri, May 23, 2008 at 12:32 PM, Marcel Levy <heymarcel@gmail.com>
wrote:
>>
>> I''m trying to use the "password" parameter for users
on a set of
>> workstations running Centos 5.1, but I''m getting an error.
I''ve
>> included some debugging output:
>>
>> debug: getting config
>> debug: Calling puppetmaster.getconfig
>> err: Could not retrieve configuration: Invalid parameter
'':password''
>> for type ''user'' in file
/etc/puppet/manifests/classes/sybyl.pp at line
>> 15
>>
>> Here''s the sybyl.pp file:
>>
>> class sybyl {
>>    include ruby-shadow
>>    package { mesa-libGLU: ensure => installed }
>>    package { libXmu: ensure => installed }
>>    package { libXpm: ensure => installed }
>>    package { libXp: ensure => installed }
>>    user { "tripos":
>>        password => ''<password hash
snipped>'',
>>        ensure => "present",
>>        uid     => 10000,
>>        gid     => 10000,
>>        comment => "Tripos user",
>>        home => "/home/tripos",
>>        shell => "/bin/bash"
>>    }
>>    group { "tripos":
>>        ensure => "present",
>>        gid => 10000
>>    }
>> }
>>
>>
>> I also inserted a backtrace at the point the exception occurs, in
>> "network/client/master.rb," line 645 . Here''s the
backtrace:
>>
>> /usr/lib/ruby/site_ruby/1.8/puppet/network/xmlrpc/client.rb:52:in
>> `getconfig''
>> /usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:587:in
>> `get_remote_config''
>> /usr/lib/ruby/site_ruby/1.8/puppet/util.rb:212:in `benchmark''
>> /usr/lib/ruby/1.8/benchmark.rb:293:in `measure''
>> /usr/lib/ruby/1.8/benchmark.rb:307:in `realtime''
>> /usr/lib/ruby/site_ruby/1.8/puppet/util.rb:211:in `benchmark''
>> /usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:584:in
>> `get_remote_config''
>> /usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:555:in
>> `get_actual_config''
>> /usr/lib/ruby/1.8/timeout.rb:48:in `timeout''
>> /usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:554:in
>> `get_actual_config''
>> /usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:204:in
>> `getconfig''
>> /usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:298:in
`run''
>> /usr/lib/ruby/site_ruby/1.8/puppet/util.rb:434:in `thinmark''
>> /usr/lib/ruby/1.8/benchmark.rb:293:in `measure''
>> /usr/lib/ruby/1.8/benchmark.rb:307:in `realtime''
>> /usr/lib/ruby/site_ruby/1.8/puppet/util.rb:433:in `thinmark''
>> /usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:297:in
`run''
>> /usr/lib/ruby/1.8/sync.rb:229:in `synchronize''
>> /usr/lib/ruby/site_ruby/1.8/puppet/network/client/master.rb:291:in
`run''
>> /usr/sbin/puppetd:425
>>
>> I''ve found several contradictory references to useradd, which
is the
>> provider I''m using. The type reference [1] says that it
doesn''t have
>> the "manages_passwords" feature, but there are several pages
[2,3]
>> that indicate that it will work, as long as libshadow is installed.
>> I''ve installed it from RPMforge, and I confirmed that it works
via
>> irb.
>>
>> Any ideas or help would be much appreciated.
>>
>> Thanks,
>> -Marcel Levy <mlevy@unr.edu>
>> Bioinformatics Specialist,
>> Center for Bioinformatics
>> University of Nevada, Reno
>>
>>
>> [1] http://reductivelabs.com/trac/puppet/wiki/TypeReference#id199
>> [2] http://reductivelabs.com/trac/puppet/wiki/PuppetRedHatCentos
>> [3]
>>
http://www.raskas.be/blog/2007/09/10/managing-user-passwords-with-puppet-on-centos/
>>
>>
>
>
> >
>
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Mark Foster

2008-May-23 19:46 UTC

head link

[Puppet Users] Re: password attribute for users

Marcel Levy wrote:> Yeah, it''s installed, but it still doesn''t work.
>
>   Some hints... Find the error message!
I seemed to recall having some problems when the password hash contained 
certain characters.
Also make sure to not use double-quote... instead use single-quotes, e.g.
password => ''$1$LU.r1qgx$XbcRiNjgXc3ZDtuJaOu4n0''
Otherwise you get some weird behavior like variable interpolation 
resulting in truncation.

-- 
Mark Foster - Sr. Systems Engineer - BitPusher, LLC 

We push your bits so you don''t have to! http://www.bitpusher.com/


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Marcel Levy

2008-May-23 20:01 UTC

head link

[Puppet Users] Re: password attribute for users

Mark, I included all the error output and a backtrace in my original
message, but here''s the error message again:

err: Could not retrieve configuration: Invalid parameter
'':password''

And yes, I already got bit by the double-quoting bug, but the password
hash is single-quoted.

Thanks,
-Marcel

On Fri, May 23, 2008 at 12:46 PM, Mark Foster <mfoster@bitpusher.com>
wrote:>
> Marcel Levy wrote:
>> Yeah, it''s installed, but it still doesn''t work.
>>
>>
> Some hints... Find the error message!
> I seemed to recall having some problems when the password hash contained
> certain characters.
> Also make sure to not use double-quote... instead use single-quotes, e.g.
> password => ''$1$LU.r1qgx$XbcRiNjgXc3ZDtuJaOu4n0''
> Otherwise you get some weird behavior like variable interpolation
> resulting in truncation.
>
> --
> Mark Foster - Sr. Systems Engineer - BitPusher, LLC
>
> We push your bits so you don''t have to! http://www.bitpusher.com/
>
>
> >
>
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Mike Renfro

2008-May-24 17:10 UTC

head link

[Puppet Users] Re: password attribute for users

The $1$ part of an md5 password would definitely be subject to interpolation
normally.

--
Mike Renfro  / R&D Engineer, Center for Manufacturing Research
931 372-3601 / Tennessee Technological University

-----Original Message-----
From: Mark Foster <mfoster@bitpusher.com>
Date: Friday, May 23, 2008 2:47 pm
Subject: [Puppet Users] Re: password attribute for users
To: puppet-users@googlegroups.comReply-to: puppet-users@googlegroups.com

>Marcel Levy wrote:
> Yeah, it''s installed, but it still doesn''t work.
>
>>   
>Some hints... Find the error message!
>I seemed to recall having some problems when the password hash contained 
>certain characters.
>Also make sure to not use double-quote... instead use single-quotes, e.g.
password => ''$1$LU.r1qgx$XbcRiNjgXc3ZDtuJaOu4n0''
>Otherwise you get some weird behavior like variable interpolation 
>resulting in truncation.
>
>-- 
>Mark Foster - Sr. Systems Engineer - BitPusher, LLC 
>
>We push your bits so you don''t have to! http://www.bitpusher.com/
>
>
>>
>

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Luke Kanies

2008-May-24 17:43 UTC

head link

[Puppet Users] Re: password attribute for users

On May 23, 2008, at 3:01 PM, Marcel Levy wrote:
> Mark, I included all the error output and a backtrace in my original
> message, but here''s the error message again:
>
> err: Could not retrieve configuration: Invalid parameter
'':password''
>
> And yes, I already got bit by the double-quoting bug, but the password
> hash is single-quoted.

You sure you''re using a recent enough version that it has that  
parameter?  Check type/user.rb and make sure it''s actually there.

-- 
Love is a snowmobile racing across the tundra and then suddenly it
flips over, pinning you underneath. At night, the ice weasels come.
     --Matt Groening
---------------------------------------------------------------------
Luke Kanies | http://reductivelabs.com | http://madstop.com


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Marcel Levy

2008-May-24 22:37 UTC

head link

[Puppet Users] Re: password attribute for users

Luke,

It does have the password property. Here''s some code starting at line
179 of type/user.rb:

        newproperty(:password, :required_features => :manages_passwords) do
            desc "The user''s password, in whatever encrypted
format
the local machine requires."
        end

Thanks,
-Marcel

On Sat, May 24, 2008 at 10:43 AM, Luke Kanies <luke@madstop.com>
wrote:>
> On May 23, 2008, at 3:01 PM, Marcel Levy wrote:
>
>> Mark, I included all the error output and a backtrace in my original
>> message, but here''s the error message again:
>>
>> err: Could not retrieve configuration: Invalid parameter
'':password''
>>
>> And yes, I already got bit by the double-quoting bug, but the password
>> hash is single-quoted.
>
>
> You sure you''re using a recent enough version that it has that
> parameter?  Check type/user.rb and make sure it''s actually there.
>
> --
> Love is a snowmobile racing across the tundra and then suddenly it
> flips over, pinning you underneath. At night, the ice weasels come.
>     --Matt Groening
> ---------------------------------------------------------------------
> Luke Kanies | http://reductivelabs.com | http://madstop.com
>
>
> >
>
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Luke Kanies

2008-May-25 17:11 UTC

head link

[Puppet Users] Re: password attribute for users

On May 24, 2008, at 5:37 PM, Marcel Levy wrote:
> Luke,
>
> It does have the password property. Here''s some code starting at
line
> 179 of type/user.rb:
>
>        newproperty(:password, :required_features  
> => :manages_passwords) do
>            desc "The user''s password, in whatever encrypted
format
> the local machine requires."
>        end

On your server, too?  That error is coming from the server.

-- 
Somebody has to do something, and it''s just incredibly pathetic that it
has to be us. --Jerry Garcia
---------------------------------------------------------------------
Luke Kanies | http://reductivelabs.com | http://madstop.com


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Marcel Levy

2008-May-28 18:12 UTC

head link

[Puppet Users] Re: password attribute for users

On Sun, May 25, 2008 at 10:11 AM, Luke Kanies <luke@madstop.com> wrote:
>
> On May 24, 2008, at 5:37 PM, Marcel Levy wrote:
>
> > Luke,
> >
> > It does have the password property. Here''s some code starting
at line
> > 179 of type/user.rb:
> >
> >        newproperty(:password, :required_features
> > => :manages_passwords) do
> >            desc "The user''s password, in whatever
encrypted format
> > the local machine requires."
> >        end
>
>
> On your server, too?  That error is coming from the server.
>
>Luke, thanks. That clarified everything.

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Puppet users - May 2008 - password attribute for users

[Puppet Users] password attribute for users

[Puppet Users] Re: password attribute for users

[Puppet Users] Re: password attribute for users

[Puppet Users] Re: password attribute for users

[Puppet Users] Re: password attribute for users

[Puppet Users] Re: password attribute for users

[Puppet Users] Re: password attribute for users

[Puppet Users] Re: password attribute for users

[Puppet Users] Re: password attribute for users

[Puppet Users] Re: password attribute for users