(inline)

On Fri, Mar 07, 2014 at 09:39:44AM -0600, Kenton Brede wrote:
>    I've got a module that installs and configures LDAP for user
>    authentication.� I've got another module that creates user directories and
>    another that assigns ssh keys.
> 
>    Using runstages I force the "ldap" module to run first and the "user" and
>    "ssh_keys" modules to run last.
>    LDAP is installed but the exec that creates user directories and the
>    ssh_authorized_key type fail since they can't see the LDAP users.
>
>    The reason being, I'm assuming, is because when the manifest is compiled,
>    the LDAP users don't exist.� So ssh_authorized_key fails, even if the LDAP
>    user information can be retrieved, by the time the ssh_keys module runs.
> 
>    Is there any way around this?

Sounds like this somewhere top-scope:

Class['ldap'] -> User <| |>

So your ldap class would have to be successfully managed before puppet tries to 
manage any users.

http://docs.puppetlabs.com/puppet/latest/reference/lang_relationships.html
http://docs.puppetlabs.com/puppet/latest/reference/lang_collectors.html

>    If I run the puppet agent twice, all is well.� It would just be nice to do
>    it in one run.
>    Thanks,
> 
>    --
>    Kent
> 
>    --
>    You received this message because you are subscribed to the Google Groups
>    "Puppet Users" group.
>    To unsubscribe from this group and stop receiving emails from it, send an
>    email to [1]puppet-users+unsubscr...@googlegroups.com.
>    To view this discussion on the web visit
>    
> [2]https://groups.google.com/d/msgid/puppet-users/CA%2BnSE38wWZn5vgv0bKC8kb5pjtdoQ8hHPK%2BWdajXGdssbOdHpA%40mail.gmail.com.
>    For more options, visit [3]https://groups.google.com/d/optout.
> 
> References
> 
>    Visible links
>    1. mailto:puppet-users+unsubscr...@googlegroups.com
>    2. 
> https://groups.google.com/d/msgid/puppet-users/CA%2BnSE38wWZn5vgv0bKC8kb5pjtdoQ8hHPK%2BWdajXGdssbOdHpA%40mail.gmail.com?utm_medium=email&utm_source=footer
>    3. https://groups.google.com/d/optout

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/20140307173820.GA13801%40iniquitous.heresiarch.ca.
For more options, visit https://groups.google.com/d/optout.

Reply via email to