Jira (PUP-10320) Secondary group handling causing issues in 6.13.0

3 views
Skip to first unread message

Robert Brooks (Jira)

unread,
Feb 28, 2020, 2:48:03 PM2/28/20
to puppe...@googlegroups.com
Robert Brooks created an issue
 
Puppet / Bug PUP-10320
Secondary group handling causing issues in 6.13.0
Issue Type: Bug Bug
Affects Versions: PUP 6.13.0
Assignee: Unassigned
Components: Catalog Application
Created: 2020/02/28 11:47 AM
Priority: Normal Normal
Reporter: Robert Brooks

Puppet Version: 6.13.0
Puppet Server Version: 6.9.0-1.el7
OS Name/Version: Centos 7

Issues with managing users, groups and secondary groups with 6.13.0, issue is not present in 6.12.0.

Desired Behavior:

 

Info: Applying configuration version '1582911791'
Notice: /Stage[main]/Users::Users/Users::Local_user[pcowger]/Accounts::User[jsmith]/Group[jsmith]/ensure: created
Notice: /Stage[main]/Users::Users/Users::Local_user[jsmith]/Accounts::User[jsmith]/User[jsmith]/ensure: created
Notice: /Stage[main]/Users::Groups/Users::Virtual_group[dev]/Group[dev]/members: members changed 'auser,another' to ['auser', 'another', 'jsmith'] (corrective)

 

Actual Behavior:

Info: Loading facts
Error: Failed to apply catalog: Parameter members failed on Group[dev]: can't find user for jsmith (file: /etc/puppetlabs/code/environments/production/modules/users/manifests/virtual_group.pp, line: 13)

 

local_user.pp contains the following code...

accounts::user { "$title":
  ensure => $ensure,
  shell => $shell,
  comment => $comment,
  home => $home,
  home_mode => $home_mode,
  uid => $uid,
  gid => $gid,
  group => $group,
  create_group => $create_group,
  membership => $membership,
  forcelocal => $forcelocal,
  password => $password,
  locked => $locked,
  sshkeys => $sshkeys,
  purge_sshkeys => $purge_sshkeys,
  managehome => $managehome,
  bashrc_content => $bashrc_content,
  bashrc_source => $bashrc_source,
  bash_profile_content => $bash_profile_content,
  bash_profile_source => $bash_profile_source,
  system => $system,
  ignore_password_if_empty => $ignore_password_if_empty,
  forward_content => $forward_content,
  forward_source => $forward_source,
{{ }}}

User[$title] -> Group[$groups.delete($group)]

 

On 6.12.0 and earlier we see the primary group created, the user and the secondary group, on 6.13.0 this does not occur we get an error that the not yet created user can't be found.

 

Add Comment Add Comment
 
This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935)
Atlassian logo

Robert Brooks (Jira)

unread,
Feb 28, 2020, 2:49:03 PM2/28/20
to puppe...@googlegroups.com
Robert Brooks updated an issue
Change By: Robert Brooks
*Puppet Version: 6.13.0*
*Puppet Server Version: 6.9.0-1.el7*
*OS Name/Version: Centos 7*


Issues with managing users, groups and secondary groups with 6.13.0, issue is not present in 6.12.0.

*Desired Behavior:*

 

{{Info: Applying configuration version '1582911791'}}
{{Notice: /Stage[main]/Users::Users/Users::Local_user[
pcowger jsmith ]/Accounts::User[jsmith]/Group[jsmith]/ensure: created}}

{{Notice: /Stage[main]/Users::Users/Users::Local_user[jsmith]/Accounts::User[jsmith]/User[jsmith]/ensure: created}}
{{Notice: /Stage[main]/Users::Groups/Users::Virtual_group[dev]/Group[dev]/members: members changed 'auser,another' to ['auser', 'another', 'jsmith'] (corrective)}}

 

*Actual Behavior:*


{{Info: Loading facts}}

Robert Brooks (Jira)

unread,
Feb 28, 2020, 6:02:02 PM2/28/20
to puppe...@googlegroups.com

Jorie Tappa (Jira)

unread,
Mar 2, 2020, 2:27:04 PM3/2/20
to puppe...@googlegroups.com

Mihai Buzgau (Jira)

unread,
Mar 3, 2020, 2:50:04 AM3/3/20
to puppe...@googlegroups.com
Mihai Buzgau updated an issue
Change By: Mihai Buzgau
Sprint: NW - 2020-03-04

Mihai Buzgau (Jira)

unread,
Mar 3, 2020, 2:50:04 AM3/3/20
to puppe...@googlegroups.com

Mihai Buzgau (Jira)

unread,
Mar 3, 2020, 6:33:04 AM3/3/20
to puppe...@googlegroups.com

Ciprian Badescu (Jira)

unread,
Mar 3, 2020, 7:25:03 AM3/3/20
to puppe...@googlegroups.com
Ciprian Badescu commented on Bug PUP-10320
 
Re: Secondary group handling causing issues in 6.13.0

Robert Brooks, I reproduced similar issue with simple manifest like:

 

user { 'foo':
  ensure   => present,
}
group { 'dev':
  members => 'foo'
}

Can you check if this is the problem you have?

For this one the fix is in testing/review: https://github.com/puppetlabs/puppet/pull/8013/files

 

Ciprian Badescu (Jira)

unread,
Mar 3, 2020, 9:30:04 AM3/3/20
to puppe...@googlegroups.com

With above mention fix we can say the problem from https://tickets.puppetlabs.com/browse/MODULES-10574 is solved.

Can you please provide more information on you issue (a couple of failing manifests) to reproduce and investigate problem on our side?

 

Mihai Buzgau (Jira)

unread,
Mar 4, 2020, 8:22:03 AM3/4/20
to puppe...@googlegroups.com
Mihai Buzgau updated an issue
Change By: Mihai Buzgau
Fix Version/s: PUP 6.14.0

Robert Brooks (Jira)

unread,
Mar 4, 2020, 1:46:03 PM3/4/20
to puppe...@googlegroups.com
Robert Brooks commented on Bug PUP-10320
 
Re: Secondary group handling causing issues in 6.13.0

Ciprian Badescu is a patched package available?

Github doesn't seem to want to give me a diff/patch. I can provide the manifest privately, but it does a lot of things and I would need to anonymize users etc. 

Ciprian Badescu (Jira)

unread,
Mar 4, 2020, 2:22:04 PM3/4/20
to puppe...@googlegroups.com

Robert Brooks (Jira)

unread,
Mar 4, 2020, 3:31:03 PM3/4/20
to puppe...@googlegroups.com

Ciprian Badescu I can confirm 6.13.0 with your patch applied no longer exhibits the issue shown above.

Many thanks!

Ciprian Badescu (Jira)

unread,
Mar 6, 2020, 5:35:04 AM3/6/20
to puppe...@googlegroups.com
Reply all
Reply to author
Forward
0 new messages