Jira (PUP-7793) Puppet agent replacing transactionstore.yaml on first run after boot
Title: Message Title
Glenn Sarti commented on PUP-7793
Re: Puppet agent replacing transactionstore.yaml on first run after boot
As of the PA-2112 merge, this is no longer an issue. Repro:
Create a local user called 'puppetuser' and join to Local Administrators group. This simulates a domain account
Install Puppet Agent with PS C:\ProgramData\PuppetLabs> msiexec /i PUPPET_AGENT_ACCOUNT_USER=pupp etuser PUPPET_AGENT_ACCOUNT_PASSWORD=* PUPPET_AGENT_ACCOUNT_DOMAIN=. ALLUSERS=1 /qb-
Confirm puppet agent is running as user, not Local System
From Puppet Enterprise console;
identity {u'user': u'WIN-HBIOD5I9GSO\\puppetuser', u'privileged': True}
id WIN-HBIOD5I9GSO\puppetuser
All directories have permissions Administrators: FULL CONTROL SYSTEM: FULL CONTROL C:/ProgramData/PuppetLabs/puppet/cache/state C:/ProgramData/PuppetLabs/puppet/cache C:/ProgramData/PuppetLabs/puppet e.g.
PS C:\programdata\PuppetLabs\puppet> icacls C:/ProgramData/PuppetLabs/puppet/cache/state
C:/ProgramData/PuppetLabs/puppet/cache/state NT AUTHORITY\SYSTEM:(OI)(CI)(F)
BUILTIN\Administrators:(OI)(CI)(F)
Successfully processed 1 files; Failed processing 0 files
Jira (PUP-7793) Puppet agent replacing transactionstore.yaml on first run after boot
Title: Message Title Michael Lombardi commented on PUP-7793 Re: Puppet agent replacing transactionstore.yaml on first run after boot Ethan Brown to pair on this. Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7793) Puppet agent replacing transactionstore.yaml on first run after boot
Title: Message Title Glenn Sarti updated an issue Puppet / PUP-7793 Puppet agent replacing transactionstore.yaml on first run after boot Change By: Glenn Sarti Story Points: 1 Sprint: Windows Hopper 2018-08-15 Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7793) Puppet agent replacing transactionstore.yaml on first run after boot
Title: Message Title Glenn Sarti assigned an issue to Glenn Sarti Puppet / PUP-7793 Puppet agent replacing transactionstore.yaml on first run after boot Change By: Glenn Sarti Assignee: Glenn Sarti Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7793) Puppet agent replacing transactionstore.yaml on first run after boot
Title: Message Title Glenn Sarti commented on PUP-7793 Re: Puppet agent replacing transactionstore.yaml on first run after boot Blocked on PA-2112. After which this should be "closed - won't fix" as it is no longer an issue. Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7793) Puppet agent replacing transactionstore.yaml on first run after boot
Title: Message Title Erick Banks updated an issue Puppet / PUP-7793 Puppet agent replacing transactionstore.yaml on first run after boot Change By: Erick Banks Sprint: Windows Hopper Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7793) Puppet agent replacing transactionstore.yaml on first run after boot
Title: Message Title Erick Banks commented on PUP-7793 Re: Puppet agent replacing transactionstore.yaml on first run after boot Erick Banks try to repro this Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7793) Puppet agent replacing transactionstore.yaml on first run after boot
Title: Message Title Daniel Helgenberger commented on PUP-7793 Re: Puppet agent replacing transactionstore.yaml on first run after boot This seems to be solved for me starting with the puppet 5.5 line. Add Comment This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7793) Puppet agent replacing transactionstore.yaml on first run after boot
Title: Message Title Craig Gomes updated an issue Puppet / PUP-7793 Puppet agent replacing transactionstore.yaml on first run after boot Change By: Craig Gomes Sprint: Windows Kanban Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7793) Puppet agent replacing transactionstore.yaml on first run after boot
Title: Message Title Craig Gomes updated an issue Puppet / PUP-7793 Puppet agent replacing transactionstore.yaml on first run after boot Change By: Craig Gomes Sprint: Windows Kanban Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7793) Puppet agent replacing transactionstore.yaml on first run after boot
Title: Message Title Daniel Helgenberger commented on PUP-7793 Re: Puppet agent replacing transactionstore.yaml on first run after boot Hello Ethan Brown, my inital puppet runs are performed by the domian account user already: Installer is run by local admin, specifying domain, domain account, account password Service is stared after installer run automatically and run under the specified user account I do not explicitly add the domain user account to local administrator group, [since the MSI installer takes care of that](https://docs.puppet.com/puppet/5.1/install_windows.html#puppetagentaccountuser). I double checked, and our pupped domain user is indeed member of administrators. The requested acl's: C:/ProgramData/PuppetLabs/puppet/cache/state Path : Microsoft.PowerShell.Core\FileSystem::C:\ProgramData\PuppetLabs\puppet\cache\state Owner : BUILTIN\Administrators Group : MBOX\Domain Admins Access : NULL SID Allow AppendData Everyone Allow ReadAndExecute, Synchronize CREATOR OWNER Allow DeleteSubdirectoriesAndFil
Jira (PUP-7793) Puppet agent replacing transactionstore.yaml on first run after boot
Title: Message Title Ethan Brown commented on PUP-7793 Re: Puppet agent replacing transactionstore.yaml on first run after boot Hi Daniel Helgenberger - In this case it looks like your initial Puppet run(s) were performed by a different user than the domain user that the service is currently configured to run as. It's likely related to PUP-6729. A few questions: Is the domain admin account Puppet is configured to run a member of the local Administrators group? Can you use PowerShell to query for the file permissions using the Get-Acl cmdlet for the following paths: C:/ProgramData/PuppetLabs/puppet/cache/state C:/ProgramData/PuppetLabs/puppet/cache C:/ProgramData/PuppetLabs/puppet Thanks! Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this
Jira (PUP-7793) Puppet agent replacing transactionstore.yaml on first run after boot
Title: Message Title Josh Cooper updated an issue Puppet / PUP-7793 Puppet agent replacing transactionstore.yaml on first run after boot Change By: Josh Cooper Team: Windows Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7793) Puppet agent replacing transactionstore.yaml on first run after boot
Title: Message Title Daniel Helgenberger created an issue Puppet / PUP-7793 Puppet agent replacing transactionstore.yaml on first run after boot Issue Type: Bug Affects Versions: PUP 4.10.4, PUP 4.10.3, PUP 4.10.2 Assignee: Unassigned Components: AIO, Catalog Application Created: 2017/07/21 3:47 AM Environment: OS: Windows 10x64, update 1703 puppetlabs-acl (v2.0.0) Puppet runs as domain user account Priority: Normal Reporter: Daniel Helgenberger On the first puppet run after booting the host, a catalog apply error is thrown
