Jira (PUP-4802) Windows 2008 "Failed to add access control entry" on a file

[Mark Cornmesser (JIRA)]

Mark Cornmesser created an issue

Puppet / PUP-4802 Windows 2008 "Failed to add access control entry" on a file Issue Type: Bug Assignee: Unassigned Created: 2015/06/30 12:41 PM Priority: Normal Reporter: Mark Cornmesser Mon Jun 01 09:52:38 -0700 2015 Puppet (err): Failed to set owner to 'S-1-5-21-3861705028-2700629737-4079167078-500': Failed to add access control entry: No more memory is available for security information updates. Mon Jun 01 09:52:38 -0700 2015 /Stage[main]/Puppet::Atboot/File[c:/etc/puppetmasters.txt]/owner (err): change from NT AUTHORITY\SYSTEM to B-2008-IX-0178\root failed: Failed to set owner to 'S-1-5-21-3861705028-2700629737-4079167078-500': Failed to add access control entry: No more memory is available for security information updates. It seems that if the owner of the file is changed, and then Puppet changes it back, it appends the account to the dacl. Instead of replacing an entry. It will then at some point reach its limit in dacl entries. I have worked around this by using an icacl command in an exec in the manifest. Add Comment

This message was sent by Atlassian JIRA (v6.3.15#6346-sha1:dbc023d)

[Josh Cooper (JIRA)]

Josh Cooper updated an issue

Puppet / PUP-4802 Windows 2008 "Failed to add access control entry" on a file

Change By: Josh Cooper Scrum Team: Windows

Add Comment

[Josh Cooper (JIRA)]

Josh Cooper updated an issue

Puppet / PUP-4802 Windows 2008 "Failed to add access control entry" on a file Change By: Josh Cooper

{noformat} Mon Jun 01 09:52:38 -0700 2015 Puppet (err): Failed to set owner to 'S-1-5-21-3861705028-2700629737-4079167078-500': Failed to add access control entry: No more memory is available for security information updates.  Mon Jun 01 09:52:38 -0700 2015 /Stage[main]/Puppet::Atboot/File[c:/etc/puppetmasters.txt]/owner (err): change from NT AUTHORITY\SYSTEM to B-2008-IX-0178\root failed: Failed to set owner to 'S-1-5-21-3861705028-2700629737-4079167078-500': Failed to add access control entry: No more memory is available for security information updates. {noformat}

It seems that if the owner of the file is changed, and then Puppet changes it back, it appends the account to the dacl. Instead of replacing an entry. It will then at some point reach its limit in dacl entries.  I have worked around this by using an icacl command in an exec in the manifest.

Add Comment

[Kenaz Kwa (JIRA)]

Kenaz Kwa updated an issue

Puppet / PUP-4802 Windows 2008 "Failed to add access control entry" on a file

Change By: Kenaz Kwa Team: Agent & Platform Support

Add Comment

This message was sent by Atlassian JIRA (v6.4.13#64028-sha1:b7939e9)

[Ethan Brown (JIRA)]

Ethan Brown updated an issue

Puppet / PUP-4802 Windows 2008 "Failed to add access control entry" on a file

Change By: Ethan Brown Labels: triaged

Add Comment

This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe)

[Josh Cooper (Jira)]

Josh Cooper commented on PUP-4802

Re: Windows 2008 "Failed to add access control entry" on a file 2008 is EOL so I'm going to close this issue.

Add Comment

This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935)