similar to: Useradd & NIS issue if the user exist

Hi, We are managing user access to servers via puppet based on the groups from LDAP. What we would further like is if any users which are created apart from puppet ie if puppet adds user1 & someone who has created a xyz user on the server. We need to remove that user from that server bcos puppet never pushed it its created by someone apart from puppet. And we can maintain

I am using Puppet 0.23.2 I am trying to add a new client -- v26.domain.com This is what I am doing from client side - v26.doamin.com #puppetd --test info: Creating a new certificate request for v26.domain.com info: Creating a new SSL key at /var/lib/puppet/ssl/private_keys/v26.domain.com.pem warning: peer certificate won''t be verified in this SSL session. notice: No

Hi, I have installed Puppet puppet-0.23.2-1.el4 & puppet-server-0.23.2-1.el4. Now trying to configure. I have a basic config which changes the sudo permission of the file. Currently I am using the puppet server as client. Now I wanted to add all my hosts some linux some unix. So was looking for a config syntax whioh can create groups. Like IT = [ host-1, host2, shost3 ]

Hi all, I''ve been looking for a good example for how one would build a module, but I couldn''t really find something that I liked, so I went ahead and tried to do it myself. The result is this: a git module (see attachment). Please have a look and comment on it, before I add it to the wiki. I especially want comments on the setup of the module itself, not so much on the git

Can anyone who''s having this problem please send details? I''m trying to reproduce it -- I''ve got 5 clients concurrently retrieving 200 10k files made of random binary, and I can''t get any corruption or memory growth at all. Is everyone experiencing the problem using Mongrel? Webrick? What versions of ruby? Are only big files affected? Small files?

I''m about to leave town for three weeks and my home server keeps rebooting. It''s my mail server, unfortunately, so there''s a good chance you won''t get this. :/ Anyway, I''ve been meaning to do this for ages and ages, and it''s time to finally do so. I need to move all of the Puppet lists to a public, non-me provider, someone who has

I was wondering if there would be any benefit to the general community if I made available a debian and ubuntu repository of up to date puppet packages. I have the infrastructure in place anyway for my work (pbuilder + falcon), and can quite easily run up a vhost on a VM somewhere. Debian Etch (4.0) for example has puppet 0.20.1, and will never get a newer version. Ubuntu Feisty has a newer

Luke has mentioned a few times that people are fairly quiet about numbers, so I thought I''d help out there. Our production Puppet server currently has 75 signed certificates, and I believe essentially all of those systems are active. We have an extremely diverse environment; there are rarely more than three or four systems that can use the same set of classes. So that represents quite

I''m trying to install the tomcat5.5 package under Debian Etch. The problem is that the init.d script for tomcat5.5 uses "su .... &" to run some things (I think logging processes?) This causes puppetd to hang in its run, because the subprocess never returns (due to open filehandles?). Does anybody have any idea what I can do to get around this? The same

I am trying to write a module for tripwire. I need to push out the twcfg.txt and twpol.txt files only if the tw.cfg and tw.pol files do not currently exist. How can do I this with File{}? I''m can''t seem to find a way to do it. In general times, how can you deploy file A only when file B does not exist? And... tripwire... what a mess. I am trying to use push out the site key,

Hi, I am using file function to copy a directory & its content to few servers. I do it below way. I am not sure whether file uses sync mode or does a copy of every file over & over when something changes. Bcos when running the puppet daemon using puppetd -test it takes a while. Where can I find a list of function like file, user group etc & what args to pass file {

Hi, I wanted to know whats the ideal way to install puppet client ie the below packages on Red Hat Linux release 9 (Shrike) system -- 2.4.20-8smp I get the dependencies issue with the below(bcso they are for RHEL4 which is 2.6 kernel). What would be an ideal way, where can I get the tar source of the compatible version of puppet/facter/ruby for Redhat 9

Hi I am trying to push populate /home & subdirectories from the puppet server to all the Linux clients. I managed this with cfengine using rsync. But I am not sure how do I achieve this in puppet, do we have any inbuilt function for this. Also, is there a function for userdel like for useradd (user) groupadd(group). Any suggestion is appreciated. -- Deepak

What is everyone''s experience with Puppet on Ubuntu? Does it work as expected? Any caveats or oddities? -- DK -- Digant C Kasundra <digant@stanford.edu> Technical Lead, ITS Unix Systems and Applications, Stanford University

Hello, I just attempted to remove both the ypbind and the yp-tools packages using the package parameter with yum. As it turns out, both of these packages depend on each other. Is there a way of forcing package removal and, if there is not, is there a way of making all packages to be removed be collapsed into the same yum command? Either of these solutions would solve the problem with the

i got a little idea there, should not puppet use environement LANG=C when managing facts or packages etc... ? i have LANG=fr_FR.UTF-8 and puppet choke on quite a few facts (erors messages with uname for exemple: Pour en savoir davantage, faites: « uname --help ». ) and also with packages updates : /usr/bin/apt-cache policy mysql-client-4.1 => err:

Is it possible to specify an arch type (e.g. i386 or x86_64, etc) when using the package resource type? -- DK

Greetings! Are there any plans of using Kerberos for authentication in addition to (or in place of) SSL certificates in Puppet? Kerberos provides mutual, cryptographically strong authentication. A number of different services are Kerberos-enabled (SSH, NFSv4 and HTTP are common examples), and thus use the same authentication mechanism system-wide. At our site, almost all services and users are

I would like to write up brief tutorial/documentation on how to manage /etc/passwd using puppet. While this may seem pretty straight forward to some...the documentation is not. We have been able to create a manifest that defines all of our users "virtually" and are able to "realize" users and add them to the system(s) running puppetd. Is there a way to simply realize all users

Greetings all, My deployment of puppet includes a monitrc to make sure that puppetd stays up and running. It seems like (across all of my hosts) that pupeptd will end up dying and restarted by monit. I''m running puppetd under a screen session now on one particular host with --debug --verbose to see if any thing comes out on console but until it happens again, any anybody else