Is anyone using camptocamp or grundic's accounts module? I can't it
working and am at my wit's end!
my problem is with the ssh_authorized_key_title . . . I'm getting the
error:
Error 400 on SERVER: stack level too deep at
/etc/puppet/modules/accounts/manifests/authorized_key.pp:35
But I think I have everything set up correctly:
In my modules/profiles/manifests/base.pp I have:
class { 'accounts':
groups => hiera_hash('accounts::groups', {}),
ssh_keys => hiera_hash('accounts::ssh_keys', {}),
users => hiera_hash('accounts::users', {}),
usergroups => hiera_hash('accounts::usergroups', {}),
accounts => hiera_hash('accounts::accounts', {}),
*ssh_authorized_key_title => '%{ssh_keys[\'%{ssh_key}\'][\'comment\']
on %{user}',*
dotfiles => hiera_hash('accounts::dotfiles', {}),
}
So that should put all of that info into my run, yes? Is there a better
place to put that?
Then in hiera I have:
$ more hieradata/common_users.eyaml
accounts::ssh_keys:
iambot:
comment: iambot@somewhere
type: ssh-dss
public: public_key
accounts::users:
iambot:
uid: 10079
gid: 10022
comment: I am a Bot
accounts::groups:
Staff:
gid: 10022
It seems that with camptocamp's implementation you then need to call
accounts::account like this to get the user created:
accounts::account { 'iambot': }
But with Grundic's it seems you have to add an accounts::account block to
the yaml above:
accounts::account:
iambot:
groups:
- Staff
authorized_keys:
- iambot
Is that right?
Anyway, I can get around the stack level error by replacing the contents of
the *ssh_authorized_key_title* with something "static", but would prefer to
have it as is.
Any ideas? ;-/
Thanks a lot,
Guy
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/CABnTgtU-5ju7dD6foU4M-pEaZ1_dtSEVZg9XWfv3%3DzFDSyswRQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.
