Thanks Danielle. I have never thought or heard about virtual users. I'll 
check out the links you provided. Thanks!

On Friday, March 14, 2014 2:24:33 AM UTC-7, Daniele Sluijters wrote:
>
> Use virtual users.
>
> Instead of declaring your users as 'real', add a @ in front of them. Now 
> they are virtual so they aren't automatically created by Puppet, you need 
> to explicitly realise them, for example based on a tag or group they're a 
> member in.
>
> You can do it along the lines of:
> Users <| tag == 'dev' }> on a development machine and Users <||> if you 
> want them all.
>
> See:
> http://docs.puppetlabs.com/puppet/latest/reference/lang_virtual.html
> http://docs.puppetlabs.com/puppet/latest/reference/lang_collectors.html
> http://docs.puppetlabs.com/guides/virtual_resources.html
> http://blog.scottlowe.org/2012/11/25/using-puppet-for-account-management/
>
> On Thursday, 13 March 2014 22:52:39 UTC+1, Philippe Conway wrote:
>>
>> So at my organization, we have different departments that should only 
>> have access to certain servers.
>>
>> For example:
>>
>> Dev Team: Dev Servers
>> Tech Support: Production Server
>> Admins: All servers
>>
>> How Puppet manages our users now, is once you add the user to the user 
>> manifest, it adds them too *all *the servers. 
>>
>> I've tried adding an if/else statement as sort of mentioned here:
>>
>> https://groups.google.com/forum/#!topic/puppet-users/EA1LKmaFFJ4
>>
>> But I learned that wasn't best practice.
>>
>> I've also tried putting users in different classes such as:
>>
>> users::dev
>> users::ts
>> users::admins
>>
>> However that gets a little redundant...Is there another way to do this 
>> through Puppet? Or am I better off using something like Active Directory to 
>> authenticate and manage groups?
>>
>> Any advice is much appreciated. Thanks!
>>
>> - Philippe
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/2023a60e-2a02-492b-8c61-9ba9421c406c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to