I tried it on a whim and I had to have the groups option set for the user
even if I didn't want him to belong to groups beyond his primary group. So I
did something like this.
user { "arnaubria":
ensure => present,
gid => "31401",
home => "/nfs/pic.es/user/a/arnaubria",
name => arnaubria,
provider => useradd,
uid => "63003",
groups => "",
membership => minimum,
groups => [ "paco" ],
}
adding the groups => "" caused puppet to remove my user from all groups
other than the one specified in gid.
Hope that helps,
--dn
On Tue, Nov 18, 2008 at 6:08 AM, Arnau Bria <[EMAIL PROTECTED]> wrote:
>
> On Wed, 19 Nov 2008 00:27:24 +1300
> Aj Aj wrote:
>
> >
> > You'll want to use the membership parameter to achieve this, check
> > the type ref.
> I've done. But I don't know how membership could help me
>
> I've tried with both values: inclusive, minimum.
>
> user { "arnaubria":
> ensure => present,
> gid => "31401",
> home => "/nfs/pic.es/user/a/arnaubria",
> name => arnaubria,
> provider => useradd,
> uid => "63003",
> membership => minimum,
> groups => [ "paco" ],
> }
>
> then I change to:
> user { "arnaubria":
> ensure => present,
> gid => "31401",
> home => "/nfs/pic.es/user/a/arnaubria",
> name => arnaubria,
> provider => useradd,
> uid => "63003",
> membership => minimum,
> }
>
>
> My user still belongs to 2 groups:
> id arnaubria
> uid=63003(arnaubria) gid=31401(grid) groups=31401(grid),502(paco)
>
> I'd like to remove seoncdary group paco.
>
>
> *I've tried membership => inclusive too.
>
> > Regards,
> >
> > Aj
> Cheers,
> Arnau
>
> >
>
--
--dn
http://www.cordump.com
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---