I maybe be something stupid (just starting to learn Puppet :), but I''m
getting problems trying to create new users. I just have a really
simple /etc/puppet/modules/user/virtual.pp that looks like this:
class user::virtual {
@user { "user1":
ensure => "present",
comment => "\"Full Name\"",
home => "/u/user1",
shell => "/bin/bash",
managehome => "true",
}
}
Then /etc/puppet/modules/user/init.pp that loads it:
import "virtual"
class user::unixteam inherits user::virtual {
realize(
User["user1"]
)
}
Then a really simple /etc/puppet/manifests/nodes.pp (loaded by
site.pp):
import "user"
node "mynode.localnet.com" {
include user::unixteam
}
I start puppetmasterd on the server (an Ubuntu 10.10 box) with "/usr/
local/sbin/puppetmasterd --no-daemonize --verbose --trace debug --
debug" and see no errors.
I run puppetd on the client (a Solaris 10 9/10 box) with "/usr/local/
sbin/puppetd --verbose --no-daemonize --server puppet.mynet.com" and
get errors:
err: /Stage[main]/User::Virtual/User[user1]/ensure: change from absent
to present failed: Could not create user user1: Execution of ''/usr/
sbin/useradd -s /bin/bash -c "Full Name" -d /u/user1 -m user1 returned
1:"
Does this sound familiar to anyone? I know there''s an open bug with a
problem in Solaris since puppet 2.6.2 came out, but I applied the
patch (*ONLY* to user_role_add.rb), but that doesn''t seem like
it''s
the same thing.
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
Bruce Richardson
2010-Oct-13 19:04 UTC
Re: [Puppet Users] Problems with Solaris 10 & adduser
On Tue, Oct 12, 2010 at 07:59:40AM -0700, nickt wrote:> > err: /Stage[main]/User::Virtual/User[user1]/ensure: change from absent > to present failed: Could not create user user1: Execution of ''/usr/ > sbin/useradd -s /bin/bash -c "Full Name" -d /u/user1 -m user1 returned > 1:"What happens if you run /usr/sbin/useradd -s /bin/bash -c "Full Name" -d /u/user1 -m user1 from the command line. -- Bruce Hierophant: someone who remembers, when you are on the way down, everything you did to them on the way up.
No problem if I do that "by hand", as root. Just gives me the normal message, "64 blocks", and creates the account and directory as indicated. On Oct 13, 2:04 pm, Bruce Richardson <itsbr...@workshy.org> wrote:> On Tue, Oct 12, 2010 at 07:59:40AM -0700, nickt wrote: > > > err: /Stage[main]/User::Virtual/User[user1]/ensure: change from absent > > to present failed: Could not create user user1: Execution of ''/usr/ > > sbin/useradd -s /bin/bash -c "Full Name" -d /u/user1 -m user1 returned > > 1:" > > What happens if you run > > /usr/sbin/useradd -s /bin/bash -c "Full Name" -d /u/user1 -m user1 > > from the command line. > > -- > Bruce > > Hierophant: someone who remembers, when you are on the way down, > everything you did to them on the way up. > > signature.asc > < 1KViewDownload-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Nigel Kersten
2010-Oct-14 16:27 UTC
Re: [Puppet Users] Re: Problems with Solaris 10 & adduser
On Thu, Oct 14, 2010 at 9:10 AM, nickt <ntkach@gmail.com> wrote:> No problem if I do that "by hand", as root. Just gives me the normal > message, "64 blocks", and creates the account and directory as > indicated.Are you running puppet as root? If not, does it work as the user puppet is running as?> > On Oct 13, 2:04 pm, Bruce Richardson <itsbr...@workshy.org> wrote: >> On Tue, Oct 12, 2010 at 07:59:40AM -0700, nickt wrote: >> >> > err: /Stage[main]/User::Virtual/User[user1]/ensure: change from absent >> > to present failed: Could not create user user1: Execution of ''/usr/ >> > sbin/useradd -s /bin/bash -c "Full Name" -d /u/user1 -m user1 returned >> > 1:" >> >> What happens if you run >> >> /usr/sbin/useradd -s /bin/bash -c "Full Name" -d /u/user1 -m user1 >> >> from the command line. >> >> -- >> Bruce >> >> Hierophant: someone who remembers, when you are on the way down, >> everything you did to them on the way up. >> >> signature.asc >> < 1KViewDownload > > -- > You received this message because you are subscribed to the Google Groups "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. > For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. > >-- nigel -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
On Thursday, October 14, 2010, Nigel Kersten <nigelk@google.com> wrote:> On Thu, Oct 14, 2010 at 9:10 AM, nickt <ntkach@gmail.com> wrote: >> No problem if I do that "by hand", as root. Just gives me the normal >> message, "64 blocks", and creates the account and directory as >> indicated. > > Are you running puppet as root? If not, does it work as the user > puppet is running as?Could you also run the agent with --debug and post the output of a failure? -Jeff>> >> On Oct 13, 2:04 pm, Bruce Richardson <itsbr...@workshy.org> wrote: >>> On Tue, Oct 12, 2010 at 07:59:40AM -0700, nickt wrote: >>> >>> > err: /Stage[main]/User::Virtual/User[user1]/ensure: change from absent >>> > to present failed: Could not create user user1: Execution of ''/usr/ >>> > sbin/useradd -s /bin/bash -c "Full Name" -d /u/user1 -m user1 returned >>> > 1:" >>> >>> What happens if you run >>> >>> /usr/sbin/useradd -s /bin/bash -c "Full Name" -d /u/user1 -m user1 >>> >>> from the command line. >>> >>> -- >>> Bruce >>> >>> Hierophant: someone who remembers, when you are on the way down, >>> everything you did to them on the way up. >>> >>> signature.asc >>> < 1KViewDownload >> >> -- >> You received this message because you are subscribed to the Google Groups "Puppet Users" group. >> To post to this group, send email to puppet-users@googlegroups.com. >> To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. >> For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. >> >> > > > > -- > nigel > > -- > You received this message because you are subscribed to the Google Groups "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. > For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. > >-- Jeff McCune http://www.puppetlabs.com/ -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Exact command I ran was /usr/local/sbin/puppetd --server myserver.dom.com --debug --logdest file --no-daemonize Sorry this is so long! Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Failed to load library ''shadow'' for feature ''libshadow'' Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Puppet::Type::User::ProviderPw: file pw does not exist Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Failed to load library ''ldap'' for feature ''ldap'' Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Puppet::Type::User::ProviderLdap: feature ldap is missing Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Puppet::Type::User::ProviderDirectoryservice: file /usr/bin/dscl does not exist Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Puppet::Type::User::ProviderUseradd: file chage does not exist Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Failed to load library ''rubygems'' for feature ''rubygems'' Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Failed to load library ''selinux'' for feature ''selinux'' Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Puppet::Type::File::ProviderMicrosoft_windows: feature microsoft_windows is missing Thu Oct 14 14:27:00 -0500 2010 /File[/var/lib/puppet/client_yaml] (debug): Autorequiring File[/var/lib/puppet] Thu Oct 14 14:27:00 -0500 2010 /File[/var/lib/puppet/run] (debug): Autorequiring File[/var/lib/puppet] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/private_keys/ client1.mydom.com.pem] (debug): Autorequiring File[/etc/puppet/ssl/ private_keys] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl] (debug): Autorequiring File[/etc/puppet] Thu Oct 14 14:27:00 -0500 2010 /File[/var/lib/puppet/log] (debug): Autorequiring File[/var/lib/puppet] Thu Oct 14 14:27:00 -0500 2010 /File[/var/lib/puppet/state/state.yaml] (debug): Autorequiring File[/var/lib/puppet/state] Thu Oct 14 14:27:00 -0500 2010 /File[/var/lib/puppet/state/graphs] (debug): Autorequiring File[/var/lib/puppet/state] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/certs] (debug): Autorequiring File[/etc/puppet/ssl] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/certs/ client1.mydom.com.pem] (debug): Autorequiring File[/etc/puppet/ssl/ certs] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/crl.pem] (debug): Autorequiring File[/etc/puppet/ssl] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/public_keys] (debug): Autorequiring File[/etc/puppet/ssl] Thu Oct 14 14:27:00 -0500 2010 /File[/var/lib/puppet/state] (debug): Autorequiring File[/var/lib/puppet] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/certs/ca.pem] (debug): Autorequiring File[/etc/puppet/ssl/certs] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/public_keys/ client1.mydom.com.pem] (debug): Autorequiring File[/etc/puppet/ssl/ public_keys] Thu Oct 14 14:27:00 -0500 2010 /File[/var/lib/puppet/client_data] (debug): Autorequiring File[/var/lib/puppet] Thu Oct 14 14:27:00 -0500 2010 /File[/var/lib/puppet/state/ classes.txt] (debug): Autorequiring File[/var/lib/puppet/state] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/private] (debug): Autorequiring File[/etc/puppet/ssl] Thu Oct 14 14:27:00 -0500 2010 /File[/var/lib/puppet/facts] (debug): Autorequiring File[/var/lib/puppet] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/ certificate_requests] (debug): Autorequiring File[/etc/puppet/ssl] Thu Oct 14 14:27:00 -0500 2010 /File[/var/lib/puppet/lib] (debug): Autorequiring File[/var/lib/puppet] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/private_keys] (debug): Autorequiring File[/etc/puppet/ssl] Thu Oct 14 14:27:00 -0500 2010 /File[/var/lib/puppet/clientbucket] (debug): Autorequiring File[/var/lib/puppet] Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Finishing transaction 76292760 Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/ certificate_requests] (debug): Autorequiring File[/etc/puppet/ssl] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl] (debug): Autorequiring File[/etc/puppet] Thu Oct 14 14:27:00 -0500 2010 /File[/var/lib/puppet/state] (debug): Autorequiring File[/var/lib/puppet] Thu Oct 14 14:27:00 -0500 2010 /File[/var/lib/puppet/lib] (debug): Autorequiring File[/var/lib/puppet] Thu Oct 14 14:27:00 -0500 2010 /File[/var/lib/puppet/run] (debug): Autorequiring File[/var/lib/puppet] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/crl.pem] (debug): Autorequiring File[/etc/puppet/ssl] Thu Oct 14 14:27:00 -0500 2010 /File[/var/lib/puppet/log] (debug): Autorequiring File[/var/lib/puppet] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/private_keys/ client1.mydom.com.pem] (debug): Autorequiring File[/etc/puppet/ssl/ private_keys] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/certs/ client1.mydom.peapod.com.pem] (debug): Autorequiring File[/etc/puppet/ ssl/certs] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/private] (debug): Autorequiring File[/etc/puppet/ssl] Thu Oct 14 14:27:00 -0500 2010 /File[/var/lib/puppet/facts] (debug): Autorequiring File[/var/lib/puppet] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/public_keys/ client1.mydom.peapod.com.pem] (debug): Autorequiring File[/etc/puppet/ ssl/public_keys] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/public_keys] (debug): Autorequiring File[/etc/puppet/ssl] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/certs/ca.pem] (debug): Autorequiring File[/etc/puppet/ssl/certs] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/certs] (debug): Autorequiring File[/etc/puppet/ssl] Thu Oct 14 14:27:00 -0500 2010 /File[/etc/puppet/ssl/private_keys] (debug): Autorequiring File[/etc/puppet/ssl] Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Finishing transaction 75903930 Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Using cached certificate for ca Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Using cached certificate for client1.mydom.com Thu Oct 14 14:27:00 -0500 2010 Puppet (notice): Starting Puppet client version 2.6.2 Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Finishing transaction 75712710 Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Loaded state in 0.00 seconds Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Using cached certificate for ca Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Using cached certificate for client1.mydom.com Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Using cached certificate_revocation_list for ca Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): catalog supports formats: b64_zlib_yaml dot marshal pson raw yaml; using pson Thu Oct 14 14:27:00 -0500 2010 Puppet (info): Caching catalog for client1.mydom.com Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Creating default schedules Thu Oct 14 14:27:00 -0500 2010 Puppet (debug): Loaded state in 0.00 seconds Thu Oct 14 14:27:00 -0500 2010 Puppet (info): Applying configuration version ''1287084394'' Thu Oct 14 14:27:01 -0500 2010 User[user1](provider=user_role_add) (debug): Executing ''/usr/sbin/useradd -s /bin/bash -c "Full Name" -d / u/user1 -m user1'' Thu Oct 14 14:27:01 -0500 2010 /Stage[main]/User::Virtual/User[user1]/ ensure (err): change from absent to present failed: Could not create user user1: Execution of ''/usr/sbin/useradd -s /bin/bash -c "Full Name" -d /u/user1 -m user1'' returned 1: Thu Oct 14 14:27:01 -0500 2010 Puppet (debug): Finishing transaction 76436680 Thu Oct 14 14:27:01 -0500 2010 Puppet (debug): Storing state Thu Oct 14 14:27:01 -0500 2010 Puppet (debug): Stored state in 0.01 seconds Thu Oct 14 14:27:01 -0500 2010 Puppet (notice): Finished catalog run in 0.05 seconds Thu Oct 14 14:27:04 -0500 2010 Puppet (notice): Caught INT; calling stop On Oct 14, 11:34 am, Jeff McCune <j...@puppetlabs.com> wrote:> On Thursday, October 14, 2010, Nigel Kersten <nig...@google.com> wrote: > > On Thu, Oct 14, 2010 at 9:10 AM, nickt <ntk...@gmail.com> wrote: > >> No problem if I do that "by hand", as root. Just gives me the normal > >> message, "64 blocks", and creates the account and directory as > >> indicated. > > > Are you running puppet as root? If not, does it work as the user > > puppet is running as? > > Could you also run the agent with --debug and post the output of a failure? > > -Jeff > > > > > > > > > > > > >> On Oct 13, 2:04 pm, Bruce Richardson <itsbr...@workshy.org> wrote: > >>> On Tue, Oct 12, 2010 at 07:59:40AM -0700, nickt wrote: > > >>> > err: /Stage[main]/User::Virtual/User[user1]/ensure: change from absent > >>> > to present failed: Could not create user user1: Execution of ''/usr/ > >>> > sbin/useradd -s /bin/bash -c "Full Name" -d /u/user1 -m user1 returned > >>> > 1:" > > >>> What happens if you run > > >>> /usr/sbin/useradd -s /bin/bash -c "Full Name" -d /u/user1 -m user1 > > >>> from the command line. > > >>> -- > >>> Bruce > > >>> Hierophant: someone who remembers, when you are on the way down, > >>> everything you did to them on the way up. > > >>> signature.asc > >>> < 1KViewDownload > > >> -- > >> You received this message because you are subscribed to the Google Groups "Puppet Users" group. > >> To post to this group, send email to puppet-users@googlegroups.com. > >> To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. > >> For more options, visit this group athttp://groups.google.com/group/puppet-users?hl=en. > > > -- > > nigel > > > -- > > You received this message because you are subscribed to the Google Groups "Puppet Users" group. > > To post to this group, send email to puppet-users@googlegroups.com. > > To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. > > For more options, visit this group athttp://groups.google.com/group/puppet-users?hl=en. > > -- > Jeff McCunehttp://www.puppetlabs.com/-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Darren Chamberlain
2010-Oct-14 19:50 UTC
Re: [Puppet Users] Re: Problems with Solaris 10 & adduser
According to http://src.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/head/userdefs.h#118, an exit status of 1 means No permission. (See http://src.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/oamuser/user/useradd.c for the source to useradd.) * nickt <ntkach at gmail.com> [2010/10/14 12:32]:> Thu Oct 14 14:27:01 -0500 2010 /Stage[main]/User::Virtual/User[user1]/ ensure (err): change from absent to present failed: Could not create user user1: Execution of ''/usr/sbin/useradd -s /bin/bash -c "Full Name" -d /u/user1 -m user1'' returned 1:-- I can''t understand why people are frightened of new ideas. I''m frightened of the old ones. -- John Cage -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Oh! (Thanks for the links! :) Okay, that would make sense then, it must be trying to do the useradd as puppet user rather than as root. Then, how do people typically deal with this sort of thing on Solaris? Give puppet user permissions to execute useradd via ACL/ roles or something? On Oct 14, 2:50 pm, Darren Chamberlain <dar...@boston.com> wrote:> According tohttp://src.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/head/us..., > an exit status of 1 means No permission. (Seehttp://src.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/oam... > for the source to useradd.) > > * nickt <ntkach at gmail.com> [2010/10/14 12:32]: > > > Thu Oct 14 14:27:01 -0500 2010 /Stage[main]/User::Virtual/User[user1]/ ensure (err): change from absent to present failed: Could not create user user1: Execution of ''/usr/sbin/useradd -s /bin/bash -c "Full Name" -d /u/user1 -m user1'' returned 1: > > -- > I can''t understand why people are frightened of new ideas. I''m > frightened of the old ones. > -- John Cage-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
And for that matter, why does it work "right" on Linux? If I run the puppetd with sudo ( sudo puppetd --server myserver.dom.com --verbose -- no-daemonize ) it works fine on Linux (or at least an Ubuntu 10.10 box). On Oct 14, 3:03 pm, nickt <ntk...@gmail.com> wrote:> Oh! (Thanks for the links! :) Okay, that would make sense then, it > must be trying to do the useradd as puppet user rather than as root. > Then, how do people typically deal with this sort of thing on > Solaris? Give puppet user permissions to execute useradd via ACL/ > roles or something? > > On Oct 14, 2:50 pm, Darren Chamberlain <dar...@boston.com> wrote: > > > > > > > > > According tohttp://src.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/head/us..., > > an exit status of 1 means No permission. (Seehttp://src.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/oam... > > for the source to useradd.) > > > * nickt <ntkach at gmail.com> [2010/10/14 12:32]: > > > > Thu Oct 14 14:27:01 -0500 2010 /Stage[main]/User::Virtual/User[user1]/ ensure (err): change from absent to present failed: Could not create user user1: Execution of ''/usr/sbin/useradd -s /bin/bash -c "Full Name" -d /u/user1 -m user1'' returned 1: > > > -- > > I can''t understand why people are frightened of new ideas. I''m > > frightened of the old ones. > > -- John Cage-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Darren Chamberlain
2010-Oct-14 20:40 UTC
Re: [Puppet Users] Re: Problems with Solaris 10 & adduser
We run puppet as root, but we do it from cron, not puppetd. * nickt <ntkach at gmail.com> [2010/10/14 13:03]:> Oh! (Thanks for the links! :) Okay, that would make sense then, it > must be trying to do the useradd as puppet user rather than as root. > Then, how do people typically deal with this sort of thing on > Solaris? Give puppet user permissions to execute useradd via ACL/ > roles or something? > > On Oct 14, 2:50 pm, Darren Chamberlain <dar...@boston.com> wrote: > > According tohttp://src.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/head/us..., > > an exit status of 1 means No permission. (Seehttp://src.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/oam... > > for the source to useradd.) > > > > * nickt <ntkach at gmail.com> [2010/10/14 12:32]: > > > > > Thu Oct 14 14:27:01 -0500 2010 /Stage[main]/User::Virtual/User[user1]/ ensure (err): change from absent to present failed: Could not create user user1: Execution of ''/usr/sbin/useradd -s /bin/bash -c "Full Name" -d /u/user1 -m user1'' returned 1:-- Unix was not designed to stop you from doing stupid things, because that would also stop you from doing clever things. -- Doug Gwyn -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
I understand what you''re saying, but I''m having a hard time picturing how you actually invoke the command then. Something along the lines of "puppet agent --server myserver.dom.com"? On Oct 14, 3:40 pm, Darren Chamberlain <dar...@boston.com> wrote:> We run puppet as root, but we do it from cron, not puppetd. > > * nickt <ntkach at gmail.com> [2010/10/14 13:03]: > > > Oh! (Thanks for the links! :) Okay, that would make sense then, it > > must be trying to do the useradd as puppet user rather than as root. > > Then, how do people typically deal with this sort of thing on > > Solaris? Give puppet user permissions to execute useradd via ACL/ > > roles or something? > > > On Oct 14, 2:50 pm, Darren Chamberlain <dar...@boston.com> wrote: > > > According tohttp://src.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/head/us..., > > > an exit status of 1 means No permission. (Seehttp://src.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/oam... > > > for the source to useradd.) > > > > * nickt <ntkach at gmail.com> [2010/10/14 12:32]: > > > > > Thu Oct 14 14:27:01 -0500 2010 /Stage[main]/User::Virtual/User[user1]/ ensure (err): change from absent to present failed: Could not create user user1: Execution of ''/usr/sbin/useradd -s /bin/bash -c "Full Name" -d /u/user1 -m user1'' returned 1: > > -- > Unix was not designed to stop you from doing stupid things, because > that would also stop you from doing clever things. > -- Doug Gwyn-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.