I tried it on a whim and I had to have the groups option set for the user even if I didn't want him to belong to groups beyond his primary group. So I did something like this.
user { "arnaubria": ensure => present, gid => "31401", home => "/nfs/pic.es/user/a/arnaubria", name => arnaubria, provider => useradd, uid => "63003", groups => "", membership => minimum, groups => [ "paco" ], } adding the groups => "" caused puppet to remove my user from all groups other than the one specified in gid. Hope that helps, --dn On Tue, Nov 18, 2008 at 6:08 AM, Arnau Bria <[EMAIL PROTECTED]> wrote: > > On Wed, 19 Nov 2008 00:27:24 +1300 > Aj Aj wrote: > > > > > You'll want to use the membership parameter to achieve this, check > > the type ref. > I've done. But I don't know how membership could help me > > I've tried with both values: inclusive, minimum. > > user { "arnaubria": > ensure => present, > gid => "31401", > home => "/nfs/pic.es/user/a/arnaubria", > name => arnaubria, > provider => useradd, > uid => "63003", > membership => minimum, > groups => [ "paco" ], > } > > then I change to: > user { "arnaubria": > ensure => present, > gid => "31401", > home => "/nfs/pic.es/user/a/arnaubria", > name => arnaubria, > provider => useradd, > uid => "63003", > membership => minimum, > } > > > My user still belongs to 2 groups: > id arnaubria > uid=63003(arnaubria) gid=31401(grid) groups=31401(grid),502(paco) > > I'd like to remove seoncdary group paco. > > > *I've tried membership => inclusive too. > > > Regards, > > > > Aj > Cheers, > Arnau > > > > -- --dn http://www.cordump.com --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en -~----------~----~----~----~------~----~------~--~---