-
Notifications
You must be signed in to change notification settings - Fork 4
Open
Description
Using the following puppet code:
chsec { 'user-default-SYSTEM':
ensure => present,
file => '/etc/security/user',
stanza => 'default',
attribute => 'SYSTEM',
value => 'compat or KRB5LDAP',
require => Service['secldapclntd'],
}
Puppet continually sets the value:
Debug: Executing: '/usr/bin/chsec -f /etc/security/user -s default -a SYSTEM=compat or KRB5LDAP'
Notice: Chsec[user-default-SYSTEM](provider=aix): Changed /etc/security/user default:SYSTEM to compat or KRB5LDAP
Notice: /Stage[main]/Aixldap::Configure/Chsec[user-default-SYSTEM]/ensure: created
Likely due to the following provider code:
chsec/lib/puppet/provider/chsec/aix.rb
Line 27 in 8c08818
| if command.split.last.split("=")[1..-1].join('=').strip != resource[:value] |
Workaround
exec { 'chsec-user-default-SYSTEM':
command => 'chsec -f /etc/security/user -s default -a SYSTEM="compat or KRB5LDAP"',
onlyif => 'lssec -f /etc/security/user -s default -a SYSTEM | awk -F= \'{print $2}\' | grep -q "compat or KRB5LDAP"',
}
Metadata
Metadata
Assignees
Labels
No labels