Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

getent group|grep -i video

produces:

video:x:33:weblogic,dummy
video:x:33:weblogic,dummy

So youre right it produces double groups, but in /etc/group there are not double groups or the user is not twice member of the group.

puppet resource user dummy

user { 'dummy':
  ensure           => 'present',
  comment          => 'ssh tunnel',
  gid              => '7115',
  groups           => ['dialout', 'video', 'dialout', 'video'],
  home             => '/opt/ssht1278',
  password         => '!',
  password_max_age => '99999',
  password_min_age => '0',
  shell            => '/bin/false',
  uid              => '1111',
}

Strange 'bug' on CentOS this gives no problem. Response from puppetlabs is is /etc/nsswitch and after changing:

group:  compat files ldap

to:

group: files ldap

fixes this issue. As we are using ldap for IDM accounts we need to test....

getent group|grep -i video

produces:

video:x:33:weblogic,dummy
video:x:33:weblogic,dummy

So youre right it produces double groups, but in /etc/group there are not double groups or and the user is not twice member of the group.

puppet resource user dummy

dummy

user { 'dummy':
  ensure           => 'present',
  comment          => 'ssh tunnel',
  gid              => '7115',
  groups           => ['dialout', 'video', 'dialout', 'video'],
  home             => '/opt/ssht1278',
  password         => '!',
  password_max_age => '99999',
  password_min_age => '0',
  shell            => '/bin/false',
  uid              => '1111',
}

Strange 'bug' on CentOS this gives no problem. Response from puppetlabs is is /etc/nsswitch and after changing:

group:  compat files ldap

to:

group: files ldap

fixes this issue. As we are using ldap for IDM accounts we need to test....