-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

jcbollinger wrote:
> Puppet's resource model involves having a common front end for each
> resource type that defines the available parameters, properties, and
> features, plus one or more "providers" for that type that interact
> with specific host environments to evaluate and update resource
> instances on those environments. user_role_add.rb is one of the
> providers for the User type.  It is the default for Solaris, so if
> you're running on Solaris then that's probably what you're using, and
> if not then not.

Okay - my memory of why sucks but Solaris uses the standard useradd
provider and some methods are overridden in the provider that adds roles
support - including the libshadow password management.

> I agree that the password management in that provider is rather
> strange.  It is usual for the User providers to rely on the host OS's
> utilities to do work (e.g. user_role_add uses useradd, usermod, etc.),
> so it is odd that password management is an exception.  Moreover, it
> is surpassingly strange that having rejected OS utilities for this
> job, the provider does not rely on the Ruby shadow password library.
> The code even contains comments complaining about manipulating the
> shadow file directly!

Possibly there may be a reason - see
http://projects.reductivelabs.com/issues/1680.  Andrew may be able to
shed light on how/why libshadow didn't do whatever magic was needed.

Andrew?

Regards

James Turnbull

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJKnDiNAAoJECFa/lDkFHAy7egIALguEHqQwlJhAJKkUay2+iDy
jqjObwWD49lqStWPlKISqVgmDhpZ63U6lLPTiQ85DT2MZ+RIRlFI6ykrN++dplCx
EoEV0EV+58FqRWZlVVU1ZZrUnVzSBirFFBQUdbiJXOOmP1zwkXExex4lkuIISD2k
MtPtVuQ+dILsIKfLfMG9jnz9L0Yqehh3MrnICW3g0pQXtmN8u5RRf7h2SZHC/VcZ
H0Osue520T7a7KZ73Z6xg/RaFBbxpWfaApGaG0g5gxv267lsQmCFzb5Gs9ubE358
nCzEjbwIbNe6XLG3l6Lu7rKtZAgtfXTM36AhmyydUeQoNukiqwuXKAKgcbR6isg=
=9kL3
-----END PGP SIGNATURE-----

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to