thr3ads.net - Puppet users - [Puppet Users] virtual resources: cannot change gid before delete group [Feb 2013]

If this information is useful, please help other people find it:
Share via:

Vlados Vlados

2013-Feb-15 06:35 UTC

[Puppet Users] virtual resources: cannot change gid before delete group

Please help.
I using virtual resource @user and @group.

If i using next construction i get error with cycles
class  users {
  Group <| ENABLED_GROUPS |>   ->    User <| ENABLED_USERS''
|> ->  User
<| DISABLED_USERS'' |>      ->    Group <| DISABLED_GROUPS
|>
}

This construction good, but puppet don''t want change gid before delete 
vacant group.
class  users {
  Group <| ENABLED_GROUPS |>   ->    User <| ENABLED_USERS''
|>
  User <| DISABLED_USERS'' |>      ->    Group <|
DISABLED_GROUPS |>
}


I think, firstly,  gid must apply to user. Then delete vacant group.

I got error
Notice: /Stage[main]/Users::Groups_list/Group[shvakov]/ensure: created
Notice: /Stage[main]/Users::Groups_list/Group[developers]/ensure: removed

Error: Could not delete group admins: Execution of ''/usr/sbin/groupdel 
admins'' returned 8: groupdel: cannot remove the primary group of user 
''shvakov''
Error: /Stage[main]/Users::Groups_list/Group[admins]/ensure: change from 
present to absent failed: Could not delete group admins: Execution of 
''/usr/sbin/groupdel admins'' returned 8: groupdel: cannot
remove the primary
group of user ''shvakov''

Notice: /Stage[main]/Users::Users_list/User[shvakov]/gid: gid changed 
''1888800000'' to ''10110''
Notice: Finished catalog run in 3.32 seconds

How change gid before delete group?


-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.

jcbollinger

2013-Feb-15 15:34 UTC

head link

[Puppet Users] Re: virtual resources: cannot change gid before delete group

On Friday, February 15, 2013 12:35:59 AM UTC-6, Vlados Vlados
wrote:>
> Please help.
> I using virtual resource @user and @group.
>
> If i using next construction i get error with cycles
> class  users {
>   Group <| ENABLED_GROUPS |>   ->    User <|
ENABLED_USERS'' |> ->  User
> <| DISABLED_USERS'' |>      ->    Group <|
DISABLED_GROUPS |>
> }
>
> This construction good, but puppet don''t want change gid before
delete
> vacant group.
> class  users {
>   Group <| ENABLED_GROUPS |>   ->    User <|
ENABLED_USERS'' |>
>   User <| DISABLED_USERS'' |>      ->    Group <|
DISABLED_GROUPS |>
> }
>
>
> I think, firstly,  gid must apply to user. Then delete vacant group.
>
> I got error
> Notice: /Stage[main]/Users::Groups_list/Group[shvakov]/ensure: created
> Notice: /Stage[main]/Users::Groups_list/Group[developers]/ensure: removed
>
> Error: Could not delete group admins: Execution of
''/usr/sbin/groupdel
> admins'' returned 8: groupdel: cannot remove the primary group of
user
> ''shvakov''
> Error: /Stage[main]/Users::Groups_list/Group[admins]/ensure: change from 
> present to absent failed: Could not delete group admins: Execution of 
> ''/usr/sbin/groupdel admins'' returned 8: groupdel: cannot
remove the primary
> group of user ''shvakov''
>
> Notice: /Stage[main]/Users::Users_list/User[shvakov]/gid: gid changed 
> ''1888800000'' to ''10110''
> Notice: Finished catalog run in 3.32 seconds
>
> How change gid before delete group?
>
>
Something along the lines of your first approach should work, though
I''m
not sure you need to separate the Users into enabled and disabled 
collections.  The key is to get the ordering relationships set up 
correctly, so the thing to look at is the dependency cycle(s) that Puppet 
reported.  You didn''t show that, so I can''t give you specific
advice, but
there are several possible problems there, including:

   1. the selection predicates in your collections might not be correctly 
   partitioning the groups and / or users into disjoint sets;
   2. you may elsewhere be declaring relationships among the users and 
   groups that close a cycle when combined with the ones here;
   3. the chain operators, or their combination with collections, may be 
   failing to correctly overrule the automatic relationship Puppet generates 
   between managed users and their managed primary group (i.e. there may be a 
   bug here).

These resources may be helpful:

   - http://docs.puppetlabs.com/learning/ordering.html
   - http://docs.puppetlabs.com/puppet/3/reference/lang_relationships.html 
   (note especially the comments about what collectors do and don''t
collect)


Good luck,

John

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.

Vlados Vladosov

2013-Feb-25 22:23 UTC

head link

[Puppet Users] Re: virtual resources: cannot change gid before delete group

I solve this problem. Thank you.
By one pass the next task solved:
1) creating-change groups
2) creating-change users
3) remove users
4) remove groups

Groups and Users list are virtual in class.
The construction must be next:


  if $fqdn =~ /ru-msk-tes-front.russia.test/ {
    Group <| title == ''prot'' or title ==
''sysadmins'' |>
    ->  User <| title == ''prot''  |>{ groups =>
[''prot'', ''sysadmins''],
before => Group[''admins'', ''developers'',
''brauser'', ''noname'',
''pepers'',
''redeyes'', ''test_group1'',
''test_group2'', ''admin'',
''vakov'', ''omenko'',
''harev'', ''sky''] }
    ->  User <| title == ''admin'' or title ==
''vakov'' or title == ''omenko''
or title == ''harev'' or title == ''sky'' |>{
ensure => ''absent'', managehome =>
''false'', }   ->    Group <| title ==
''admins'' or title == ''developers'' or
title == ''brauser'' or title == ''noname'' or
title == ''pepers'' or title ==
''redeyes'' or title == ''test_group1'' or title
== ''test_group2'' or title ==
''admin'' or title == ''vakov'' or title ==
''omenko'' or title == ''harev'' or
title == ''sky'' |>{ ensure => ''absent''
}
  }





пятница, 15 февраля 2013 г., 19:34:39 UTC+4 пользователь jcbollinger 
написал:>
>
>
> On Friday, February 15, 2013 12:35:59 AM UTC-6, Vlados Vlados wrote:
>>
>> Please help.
>> I using virtual resource @user and @group.
>>
>> If i using next construction i get error with cycles
>> class  users {
>>   Group <| ENABLED_GROUPS |>   ->    User <|
ENABLED_USERS'' |> ->  User
>> <| DISABLED_USERS'' |>      ->    Group <|
DISABLED_GROUPS |>
>> }
>>
>> This construction good, but puppet don''t want change gid
before delete
>> vacant group.
>> class  users {
>>   Group <| ENABLED_GROUPS |>   ->    User <|
ENABLED_USERS'' |>
>>   User <| DISABLED_USERS'' |>      ->    Group <|
DISABLED_GROUPS |>
>> }
>>
>>
>> I think, firstly,  gid must apply to user. Then delete vacant group.
>>
>> I got error
>> Notice: /Stage[main]/Users::Groups_list/Group[shvakov]/ensure: created
>> Notice: /Stage[main]/Users::Groups_list/Group[developers]/ensure:
removed
>>
>> Error: Could not delete group admins: Execution of
''/usr/sbin/groupdel
>> admins'' returned 8: groupdel: cannot remove the primary group
of user
>> ''shvakov''
>> Error: /Stage[main]/Users::Groups_list/Group[admins]/ensure: change
from
>> present to absent failed: Could not delete group admins: Execution of 
>> ''/usr/sbin/groupdel admins'' returned 8: groupdel:
cannot remove the primary
>> group of user ''shvakov''
>>
>> Notice: /Stage[main]/Users::Users_list/User[shvakov]/gid: gid changed 
>> ''1888800000'' to ''10110''
>> Notice: Finished catalog run in 3.32 seconds
>>
>> How change gid before delete group?
>>
>>
>
> Something along the lines of your first approach should work, though
I''m
> not sure you need to separate the Users into enabled and disabled 
> collections.  The key is to get the ordering relationships set up 
> correctly, so the thing to look at is the dependency cycle(s) that Puppet 
> reported.  You didn''t show that, so I can''t give you
specific advice, but
> there are several possible problems there, including:
>
>    1. the selection predicates in your collections might not be correctly 
>    partitioning the groups and / or users into disjoint sets;
>    2. you may elsewhere be declaring relationships among the users and 
>    groups that close a cycle when combined with the ones here;
>    3. the chain operators, or their combination with collections, may be 
>    failing to correctly overrule the automatic relationship Puppet
generates
>    between managed users and their managed primary group (i.e. there may be
a
>    bug here).
>
> These resources may be helpful:
>
>    - http://docs.puppetlabs.com/learning/ordering.html
>    -
http://docs.puppetlabs.com/puppet/3/reference/lang_relationships.html(note
especially the comments about what collectors do and don''t collect)
>
>
> Good luck,
>
> John
>
>
-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.

Puppet users - Feb 2013 - virtual resources: cannot change gid before delete group

[Puppet Users] virtual resources: cannot change gid before delete group

[Puppet Users] Re: virtual resources: cannot change gid before delete group

[Puppet Users] Re: virtual resources: cannot change gid before delete group