Re: [Puppet Users] Re: strange string in /etc/shadow

Nigel Kersten
Wed, 16 Jun 2010 01:35:37 -0000

On Tue, Jun 15, 2010 at 6:32 PM, donavan <donavan@desinc.net> wrote:

> On Jun 15, 2:39 pm, "Gus F." <gus.fer...@gmail.com> wrote:
> > I am using puppet (version 0.25.5-1.e15 for redhat) for password
> > management for non-system users. This morning,  users on some of my
> > puppet clients had their encrypted password strings in /etc/shadow
> > replaced with the following string:
> >
> > YAML::syck::BadAlias
>
> Whoa. I just saw this on a .24.8 client for the first time today. I
> poked at it for a few minutes and couldnt reproduce, so I shrugged it
> off.
>
> This is what I found in syslog:
> puppetd: Starting catalog run
> puppetd: (//#<YAML::Syck::BadAlias:0x2a98ef0a20>/File[/usr/local/bin/
> concatfragments.sh]) Failed to retrieve current state of resource:
> can''t convert YAML::Syck::BadAlias into Integer
> puppetd: (//#<YAML::Syck::BadAlias:0x2a9859e940>/Concat[/etc/
> filename.txt]/Exec[concat_/etc/filename.txt]) Dependency file[/usr/
> local/bin/concatfragments.sh] has 1 failures
> puppetd: (//#<YAML::Syck::BadAlias:0x2a9859e940>/Concat[/etc/
> filename.txt]/Exec[concat_/etc/filename.txt]) Skipping because of
> failed dependencies
> puppetd: (//#<YAML::Syck::BadAlias:0x2a9859e940>/Concat[/etc/
> filename.txt]/File[/etc/filename.txt]) Dependency file[/usr/local/bin/
> concatfragments.sh] has 1 failures
> puppetd: (//#<YAML::Syck::BadAlias:0x2a9859e940>/Concat[/etc/
> filename.txt]/File[/etc/filename.txt]) Skipping because of failed
> dependencies
> puppetd: Finished catalog run in 9.82 seconds
>
> > What could have caused this?
>
> +1 to this. Where to even look?
>

The first thing to do is to work out whether this has occurred with any
resource types other than Concat, so we know whether this is an issue in the
core puppet distribution or just in the concat type/provider.




>
> --
> You received this message because you are subscribed to the Google Groups
> "Puppet Users" group.
> To post to this group, send email to puppet-users@googlegroups.com.
> To unsubscribe from this group, send email to
>
puppet-users+unsubscribe@googlegroups.com<puppet-users%2Bunsubscribe@googlegroups.com>
> .
> For more options, visit this group at
> http://groups.google.com/group/puppet-users?hl=en.
>
>


--
nigel