Puppet users - Aug 2011 - Workaround to "Provider groupadd does not support features manages_members" ?

Hello,

I wanted to manage a couple of groups membership, under RedHat,
without managing the users (as they are LDAP users) but found out it
is not supported.... Is there a workaround to this?

I tried:

group { "jbossd":
        gid => 520,
        members => ["user1","user2"],
    }

Thanks a lot.
Mohamed.

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

Hi,

Not to clear on your situation but the following is available to you. 

Manage your jbossd groups in LDAP. That will be easiest. Create a posix ldap
group and add users as your members, remembering to keep your uids and gids
standard.

The other option is to duplicate the users in the manifest and manage their
groups. That makes managing accounts a bit more difficult.

I would as a general rule avoid duplication and trying have your user accounts
and system accounts centrally managed where possible.

Cheers,
Den

On 08/08/2011, at 7:14, Mohamed Lrhazi <lrhazi@gmail.com> wrote:
> Hello,
> 
> I wanted to manage a couple of groups membership, under RedHat,
> without managing the users (as they are LDAP users) but found out it
> is not supported.... Is there a workaround to this?
> 
> I tried:
> 
> group { "jbossd":
>        gid => 520,
>        members => ["user1","user2"],
>    }
> 
> Thanks a lot.
> Mohamed.
> 
> -- 
> You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
> To post to this group, send email to puppet-users@googlegroups.com.
> To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
> For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
> 
-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi
> I wanted to manage a couple of groups membership, under RedHat,
> without managing the users (as they are LDAP users) but found out it
> is not supported.... Is there a workaround to this?
As denmat mentioned as well I would generally try to avoid a local
groups and ldap users mix.

But, it''s possible to use augeas to manage users in a group:
https://github.com/duritong/puppet-user/blob/9bbd720da1549bf58c7707c1ac109a47e4b4a946/manifests/groups/manage_user.pp

~pete
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk4/hKkACgkQbwltcAfKi3+XuACePGaZjfkJm+ySkVoMq6z7VDGo
nLgAn2MGcXo7zbpwQNlN7VDtG8A35cE9
=AI9M
-----END PGP SIGNATURE-----

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

Cool. Thanks you so much guys.

Mohamed.

On Mon, Aug 8, 2011 at 2:39 AM, Peter Meier <peter.meier@immerda.ch>
wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi
>
>> I wanted to manage a couple of groups membership, under RedHat,
>> without managing the users (as they are LDAP users) but found out it
>> is not supported.... Is there a workaround to this?
>
> As denmat mentioned as well I would generally try to avoid a local
> groups and ldap users mix.
>
> But, it''s possible to use augeas to manage users in a group:
>
https://github.com/duritong/puppet-user/blob/9bbd720da1549bf58c7707c1ac109a47e4b4a946/manifests/groups/manage_user.pp
>
> ~pete
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAk4/hKkACgkQbwltcAfKi3+XuACePGaZjfkJm+ySkVoMq6z7VDGo
> nLgAn2MGcXo7zbpwQNlN7VDtG8A35cE9
> =AI9M
> -----END PGP SIGNATURE-----
>
> --
> You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
> To post to this group, send email to puppet-users@googlegroups.com.
> To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
> For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
>
>
-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.