Puppet users - Aug 2009 - Solaris /etc/user_attr file - anyone ever tried to manage this?

Hi all,

Am starting to look at managing some of the extended Solaris
authorisations starting with /etc/user_attr. Has anyone looked at this
before?

File is similar in format to a passwd file. Heres a couple of examples
from a default file:

adm::::profiles=Log Management
lp::::profiles=Printer Management
postgres::::type=role;profiles=Postgres Administration,All

Has anyone looked at this before? If so - how do you manage this? Did
you write a type? Or are you managing it as a file?

Any comments on this would be appreciated...

Greg
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

I am currently managing it as a file, mainly because the only extra  
entry I have there is for Oracle.


On Monday,Aug 10, 2009, at Monday,Aug 10, 20091:24 AM, Greg wrote:
>
> Hi all,
>
> Am starting to look at managing some of the extended Solaris
> authorisations starting with /etc/user_attr. Has anyone looked at this
> before?
>
> File is similar in format to a passwd file. Heres a couple of examples
> from a default file:
>
> adm::::profiles=Log Management
> lp::::profiles=Printer Management
> postgres::::type=role;profiles=Postgres Administration,All
>
> Has anyone looked at this before? If so - how do you manage this? Did
> you write a type? Or are you managing it as a file?
>
> Any comments on this would be appreciated...
>
> Greg
> >

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

You can create roles and manage them with the user provider on Solaris.

I CC''d Martin, because he knows a lot more about this than me and
probably
has a few tips on what he does.




On Sun, Aug 9, 2009 at 11:24 PM, Greg <greg.boug@gmail.com> wrote:
>
> Hi all,
>
> Am starting to look at managing some of the extended Solaris
> authorisations starting with /etc/user_attr. Has anyone looked at this
> before?
>
> File is similar in format to a passwd file. Heres a couple of examples
> from a default file:
>
> adm::::profiles=Log Management
> lp::::profiles=Printer Management
> postgres::::type=role;profiles=Postgres Administration,All
>
> Has anyone looked at this before? If so - how do you manage this? Did
> you write a type? Or are you managing it as a file?
>
> Any comments on this would be appreciated...
>
> Greg
> >
>
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Hi Greg!

On Aug 10, 7:24 am, Greg <greg.b...@gmail.com> wrote:
> Am starting to look at managing some of the extended Solaris
> authorisations starting with /etc/user_attr. Has anyone looked at this
> before?
>
Yes, I use them extensively!
> File is similar in format to a passwd file. Heres a couple of examples
> from a default file:
>
> adm::::profiles=Log Management
> lp::::profiles=Printer Management
> postgres::::type=role;profiles=Postgres Administration,All
>
> Has anyone looked at this before? If so - how do you manage this? Did
> you write a type? Or are you managing it as a file?
>
Luckily for you all of that can be done through the puppet type "user"
- since we paid Andrew to implement it for us :)

Using the postgres role above as an example, this is how it should be
configured:
user { "postgres":
    uid => 90,
    gid => 90,
    ...
    ensure => role,
    profiles => "Postgres Administration"
}

Start by reading through the user[1] type in the documentation, it
contains most of what you need. If you have more specific questions,
just drop me a line.

[1] <http://reductivelabs.com/trac/puppet/wiki/TypeReference#id313>

cheers,
/Martin
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---