Jean-Baptiste Quenot
2010-Oct-26 08:35 UTC
[Puppet Users] Puppet corrupts encrypted password with slashes
Consider the following manifest snippet:
user { "foo":
ensure => present,
managehome => true,
shell => "/bin/bash",
password =>
"$6$s95t93Ou$FWCF9kHO4/nH9hNpr5hKxrK85ufxx8jubu8EuRgCd602bC2ov3X6IKPgkupD3G3qs1QzpRitli696NoFioSPf/",
comment => "Foo Bar"
}
The resulting /etc/shadow entry is:
foo:/nH9hNpr5hKxrK85ufxx8jubu8EuRgCd602bC2ov3X6IKPgkupD3G3qs1QzpRitli696NoFioSPf/:14908:0:99999:7:::
As a result, the user cannot log in, as the encrypted password is corrupt.
This is both on 0.25 and 2.6 version.
Cheers,
--
Jean-Baptiste Quenot
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
luke.bigum
2010-Oct-26 08:38 UTC
[Puppet Users] Re: Puppet corrupts encrypted password with slashes
Your $6$s95t93Ou$FWCF9kHO4 isn''t being evaluated as a variable is it? Try enclose the password crypt in single quotes ''''. On Oct 26, 9:35 am, Jean-Baptiste Quenot <j...@caraldi.com> wrote:> Consider the following manifest snippet: > > user { "foo": > ensure => present, > managehome => true, > shell => "/bin/bash", > password => > "$6$s95t93Ou$FWCF9kHO4/nH9hNpr5hKxrK85ufxx8jubu8EuRgCd602bC2ov3X6IKPgkupD3G3qs1QzpRitli696NoFioSPf/", > comment => "Foo Bar" > } > > The resulting /etc/shadow entry is: > > foo:/nH9hNpr5hKxrK85ufxx8jubu8EuRgCd602bC2ov3X6IKPgkupD3G3qs1QzpRitli696NoFioSPf/:14908:0:99999:7::: > > As a result, the user cannot log in, as the encrypted password is corrupt. > > This is both on 0.25 and 2.6 version. > > Cheers, > -- > Jean-Baptiste Quenot-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Jean-Baptiste Quenot
2010-Oct-26 08:44 UTC
Re: [Puppet Users] Re: Puppet corrupts encrypted password with slashes
Stupid me :-) I was wondering for *years* why this user was not getting the right password... -- Jean-Baptiste Quenot -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.