Jira (PUP-3804) User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message
Title: Message Title Kurt Wall updated an issue Puppet / PUP-3804 User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message Change By: Kurt Wall QA Status: Reviewed Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3804) User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message
Title: Message Title Kurt Wall updated an issue Puppet / PUP-3804 User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message Change By: Kurt Wall QA Risk Assessment: Low Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3804) User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message
Title: Message Title Kurt Wall updated an issue Puppet / PUP-3804 User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message Change By: Kurt Wall QA Risk Assessment Reason: AddingDOMAIN\UseraccountsnotsupportedonWindows Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3804) User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message
Title: Message Title Kylo Ginsberg updated an issue Puppet / PUP-3804 User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message Change By: Kylo Ginsberg Fix Version/s: PUP4.1.0 Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3804) User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message
Title: Message Title Eric Sorenson updated an issue Puppet / PUP-3804 User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message Change By: Eric Sorenson Release Notes: BugFix NewFeature Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3804) User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message
Title: Message Title Eric Sorenson updated an issue Puppet / PUP-3804 User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message Change By: Eric Sorenson Release Notes: BugFix Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3804) User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message
Title: Message Title Kurt Wall commented on PUP-3804 Re: User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message I did the work before Ryan Gard asked me to. Is that awesome teamwork or what? Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3804) User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message
Title: Message Title Rob Reynolds assigned an issue to Ryan Gard Puppet / PUP-3804 User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message Change By: Rob Reynolds Assignee: QA RyanGard Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3804) User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message
Title: Message Title Ryan Gard assigned an issue to Kurt Wall Puppet / PUP-3804 User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message Change By: Ryan Gard Assignee: RyanGard KurtWall Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3804) User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message
Title: Message Title
Kurt Wall commented on PUP-3804
Re: User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message
I'm not sure if I've validated this or not.
# x.pp
user { \\delivery.puppetlabs.net\\KurtWall:
ensure = present,
groups = 'Administrator',
}
C:\Program Files\Puppet Labs\Puppet\binpuppet apply x.pp
Notice: Compiled catalog for jkoohkjkozqs1hp.delivery.puppetlabs.net in environm
ent production in 0.30 seconds
Error: Puppet is not able to create/delete domain users with the user resource.
Jira (PUP-3804) User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message
Title: Message Title Kurt Wall assigned an issue to Unassigned Puppet / PUP-3804 User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message Change By: Kurt Wall Assignee: KurtWall Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3804) User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message
Title: Message Title Ryan Gard commented on PUP-3804 Re: User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message Kurt Wall Tag you're it! I'm swamped with r10k work and I don't have time to FR this ticket. The biggest impediment to FR for this is getting AD running, but I know Tony has some infrastructure available. Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3804) User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message
Title: Message Title Ethan Brown commented on PUP-3804 Re: User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message Yeah Rob Reynolds I'm not sure that there's anything we do to tackle the 80070562 error. It's hard to tell from the Zendesk ticket what version was being used. We did indeed move to SIDs, which was https://projects.puppetlabs.com/issues/17031 - fixed in https://github.com/puppetlabs/puppet/commit/455834e7f21f213e9d0085510d5b47c0c3e2a1ab as part of PUP 3.4.0. That should have ensured that we're not looking at names any longer. To recap the log above where the error showed up (re-ordered / reformatted for clarity). First run failed with 0x80020009: changed Domain Users, Proofpoint Archive User Membership, wf1_ibimr-role_AnalyticalUser, wf1_ibimr-grp_herbiportal, wf1_ibimr-grp_managementre, to
Jira (PUP-3804) User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message
Title: Message Title Ethan Brown commented on PUP-3804 Re: User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message On further research to get to the bottom of the 0x80070562 error, it appears that we're not always using SIDs when evaluating what groups a User is a member of.. which we should since there can be duplicate names in different domains (i.e. local machine vs domain). Setting the groups to which a user belongs should be handled like how setting users for a group is handled. Bad: https://github.com/puppetlabs/puppet/blob/9db23cedbb330ae79f7814c041858317ad101e23/lib/puppet/util/windows/adsi.rb#L190-L202 Good: https://github.com/puppetlabs/puppet/blob/9db23cedbb330ae79f7814c041858317ad101e23/lib/puppet/util/windows/adsi.rb#L343-L353 PUP-4373 has been opened to address what we think could be the cause, and we'll proceed with the code we have for now warning about the issues that cause ERROR_BAD_USERNAME to close out this issue. Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3804) User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message
Title: Message Title Ethan Brown commented on PUP-3804 Re: User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message Merged to 3.x in https://github.com/puppetlabs/puppet/commit/f76fba979316be4f5f725c2541c2d53c3fb4d182 Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3804) User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message
Title: Message Title Ethan Brown assigned an issue to QA Puppet / PUP-3804 User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message Change By: Ethan Brown Status: Readyfor CI Test Assignee: EthanBrown QA Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3804) User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message
Title: Message Title Rob Reynolds assigned an issue to Ethan Brown Puppet / PUP-3804 User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message Change By: Rob Reynolds Assignee: EthanBrown Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-3804) User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message
Title: Message Title Ethan Brown updated an issue Puppet / PUP-3804 User resource cannot add DOMAIN\User style accounts (through Active Directory) and should emit error message Change By: Ethan Brown Summary: UserresourcecannotaddDOMAIN\Userstyleaccounts(throughActiveDirectory)andshouldemit warning errormessage Add Comment This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d) -- You received this message because you are subscribed to the Google Groups Puppet Bugs group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
