Jira (PUP-10857) User resource with forcelocal uses getent for groups
Title: Message Title
Josh Cooper commented on PUP-10857
Re: User resource with forcelocal uses getent for groups
Agent runtime has significantly increased.
Can you run puppet agent -t --evaltrace --sumarize and see which resources are taking longer? If it's reproducible, please open a new ticket. The one issue I'm aware of in this area is PUP-10856, but that was fixed in 6.21.0.
Every run "changes" the gid for every user: {quotes} That's PUP-10896. We'll have new releases out this week to resolve that.
Add Comment
This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935)
--
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.383586.1611070494000.142638.161349631%40Atlassian.JIRA.
Jira (PUP-10857) User resource with forcelocal uses getent for groups
Title: Message Title
fjc commented on PUP-10857
Re: User resource with forcelocal uses getent for groups
PUP-10896, excellent, thanks; just ignore the rest for now. Minimal test case: 6.21: $ puppet apply -e "user { 'aaa': gid => 100, forcelocal => true }" Notice: Compiled catalog for [] in environment production in 0.02 seconds Notice: /Stage[main]/Main/User[aaa]/gid: gid changed '100' to 100 Notice: Applied catalog in 0.73 seconds $ puppet apply -e "user { 'aaa': gid => '100', forcelocal => true }" Notice: Compiled catalog for [] in environment production in 0.02 seconds Notice: /Stage[main]/Main/User[aaa]/gid: gid changed '100' to 100 Notice: Applied catalog in 0.73 seconds $ puppet apply -e "user { 'aaa': gid => 'users', forcelocal => true }" Notice: Compiled catalog for [] in environment production in 0.02 seconds Notice: /Stage[main]/Main/User[aaa]/gid: gid changed '100' to 'users' Notice: Applied catalog in 0.73 seconds 6.20: $ puppet apply -e "user { 'aaa': gid => 100, forcelocal => true }" Notice: Compiled catalog for [] in environment production in 0.01 seconds Notice: Applied catalog in 0.33 seconds $ puppet apply -e "user { 'aaa': gid => '100', forcelocal => true }" Notice: Compiled catalog for [] in environment production in 0.01 seconds Notice: Applied catalog in 0.33 seconds $ puppet apply -e "user { 'aaa': gid => 'users', forcelocal => true }" Notice: Compiled catalog for [] in environment production in 0.01 seconds Notice: Applied catalog in 0.33 seconds
Add Comment
This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935)
--
You received this message because you are subscribed to the Google Groups "Puppet Bugs" g
Jira (PUP-10857) User resource with forcelocal uses getent for groups
Title: Message Title
fjc commented on PUP-10857
Re: User resource with forcelocal uses getent for groups
Since we deployed 6.21 that includes this change we're seeing two issues:
Agent runtime has significantly increased.
Every run "changes" the gid for every user:
Notice: Accounts::User[aaa]/User[aaa]/gid: gid changed '100' to 'users' (corrective) {{Notice: Accounts::User[bbb]/User[bbb]/gid: gid changed '100' to 'users' (corrective) }} Notice: Accounts::User[ccc]/User[ccc]/gid: gid changed '100' to 'users' (corrective) {{Notice: Accounts::User[ddd]/User[ddd]/gid: gid changed '100' to 'users' (corrective) }} Notice: Accounts::User[eee]/User[eee]/gid: gid changed '100' to 'users' (corrective)
Add Comment
This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935)
--
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.383586.1611070494000.142595.1613494440133%40Atlassian.JIRA.
Jira (PUP-10857) User resource with forcelocal uses getent for groups
Title: Message Title Claire Cadman updated an issue Puppet / PUP-10857 User resource with forcelocal uses getent for groups Change By: Claire Cadman Labels: doc_reviewed jira_escalated Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.383586.1611070494000.134120.1612514700175%40Atlassian.JIRA.
Jira (PUP-10857) User resource with forcelocal uses getent for groups
Title: Message Title Josh Cooper commented on PUP-10857 Re: User resource with forcelocal uses getent for groups Merged to 6.x in https://github.com/puppetlabs/puppet/commit/0cd7bcefa47b90f3c8d24e60479f41766cbc04f3 and https://github.com/puppetlabs/puppet/commit/7ee5429a3fa9faf34ab93b76d00e115c8bd21e63 Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.383586.1611070494000.132813.1612399740029%40Atlassian.JIRA.
Jira (PUP-10857) User resource with forcelocal uses getent for groups
Title: Message Title Mihai Buzgau updated an issue Puppet / PUP-10857 User resource with forcelocal uses getent for groups Change By: Mihai Buzgau Sprint: NW - 2021-02-03 , NW - 2021-02-17 Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.383586.1611070494000.131646.1612345380103%40Atlassian.JIRA.
Jira (PUP-10857) User resource with forcelocal uses getent for groups
Title: Message Title Luchian Nemes updated an issue Puppet / PUP-10857 User resource with forcelocal uses getent for groups Change By: Luchian Nemes Release Notes: Bug Fix Release Notes Summary: The `useradd` provider now checks the `forcelocal` parameter and gets local information about groups (from `/etc/groups`) and gid (from `/etc/passwd`) of a user when requested. Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.383586.1611070494000.130650.1612263420269%40Atlassian.JIRA.
Jira (PUP-10857) User resource with forcelocal uses getent for groups
Title: Message Title Josh Cooper updated an issue Puppet / PUP-10857 User resource with forcelocal uses getent for groups Change By: Josh Cooper Fix Version/s: PUP 7.4.0 Fix Version/s: PUP 6.21.0 Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.383586.1611070494000.127978.1611874140191%40Atlassian.JIRA.
Jira (PUP-10857) User resource with forcelocal uses getent for groups
Title: Message Title Mihai Buzgau assigned an issue to Luchian Nemes Puppet / PUP-10857 User resource with forcelocal uses getent for groups Change By: Mihai Buzgau Assignee: Luchian Nemes Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.383586.1611070494000.127645.161186171%40Atlassian.JIRA.
Jira (PUP-10857) User resource with forcelocal uses getent for groups
Title: Message Title Mihai Buzgau updated an issue Puppet / PUP-10857 User resource with forcelocal uses getent for groups Change By: Mihai Buzgau Story Points: 3 Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.383586.1611070494000.119210.1611136680028%40Atlassian.JIRA.
Jira (PUP-10857) User resource with forcelocal uses getent for groups
Title: Message Title Mihai Buzgau updated an issue Puppet / PUP-10857 User resource with forcelocal uses getent for groups Change By: Mihai Buzgau Sprint: NW - 2021-02-03 Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.383586.1611070494000.117992.1611073920028%40Atlassian.JIRA.
Jira (PUP-10857) User resource with forcelocal uses getent for groups
Title: Message Title zendesk.jira updated an issue Puppet / PUP-10857 User resource with forcelocal uses getent for groups Change By: zendesk.jira Labels: jira_escalated Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.383586.1611070494000.117839.1611070560231%40Atlassian.JIRA.
Jira (PUP-10857) User resource with forcelocal uses getent for groups
Title: Message Title zendesk.jira updated an issue Puppet / PUP-10857 User resource with forcelocal uses getent for groups Change By: zendesk.jira Zendesk Ticket Count: 1 Zendesk Ticket IDs: 42710 Add Comment This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.383586.1611070494000.117838.1611070560187%40Atlassian.JIRA.
Jira (PUP-10857) User resource with forcelocal uses getent for groups
Title: Message Title Jarret Lavallee created an issue Puppet / PUP-10857 User resource with forcelocal uses getent for groups Issue Type: Improvement Affects Versions: PUP 6.19.1 Assignee: Unassigned Components: Types and Providers Created: 2021/01/19 7:34 AM Priority: Normal Reporter: Jarret Lavallee *Description* When using the useradd provider with the user resource with forcelocal => true, the groups are still pulled from gentent. This causes LDAP/NIS groups to be detected instead of just the local groups. *Desired Behavior* The forcelocal => true parameter should force all options to be local. With the parameter set, the user is looked up from /etc/passwd. The groups should be looked up locally as well. *Actual Behavior* The forcelocal => true results in the user being looked up locally, but the groups are looked up through getgrent *Additional Notes* It falls back to using https://github.com/puppetlabs/puppet/blob/main/lib/puppet/util/posix.rb#L14-L33 from https://github.com/puppetlabs/puppet/blob/main/lib/puppet/provider/nameservice.rb#L235-L237 as it is not implemented in https://github.com/puppetlabs/puppet/blob/main/lib/puppet/provider/user/useradd.rb
