Uploaded image for project: 'Puppet Agent'
  1. Puppet Agent
  2. PA-783

Puppet Windows Agent cannot be installed with a domain user on locales where the Administrators group has a different name / spelling

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Normal
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: puppet-agent 5.0.0
    • Component/s: None
    • Environment:

      Master Setup: Puppet 4.8.1, Puppet 3.8.1
      Nodes: Windows Server 2012R2 (German) , Windows Server 2016 (German)

    • Template:
    • Acceptance Criteria:
      Hide

      The Puppet agent installer, when specifying a domain account, should properly add the domain account to the local Administrators account, even when Administrators is named / spelled differently as a result of running on a non-US English locale.

      Show
      The Puppet agent installer, when specifying a domain account, should properly add the domain account to the local Administrators account, even when Administrators is named / spelled differently as a result of running on a non-US English locale.
    • Team:
      Agent
    • Story Points:
      3
    • Sprint:
      Agent 2017-06-14, Agent 2017-06-28
    • Release Notes Summary:
      Hide
      Affects all localised Windows installation.

      Should add the Administrator user to to the localised "Administrators" group and the {{facts.d}} directory with localised "Everyone" permissions.
      E.g. on a localised French Windows, the permissions are now set to:
      {noformat}
      C:\Users\Administrator\Documents>icacls C:\ProgramData\PuppetLabs\facter\facts.d
      C:\ProgramData\PuppetLabs\facter\facts.d Tout le monde:(OI)(CI)(RX)
                                               BUILTIN\Administrateurs:(OI)(CI)(F)
                                               AUTORITE NT\Système:(OI)(CI)(F)
      {noformat}
      Show
      Affects all localised Windows installation. Should add the Administrator user to to the localised "Administrators" group and the {{facts.d}} directory with localised "Everyone" permissions. E.g. on a localised French Windows, the permissions are now set to: {noformat} C:\Users\Administrator\Documents>icacls C:\ProgramData\PuppetLabs\facter\facts.d C:\ProgramData\PuppetLabs\facter\facts.d Tout le monde:(OI)(CI)(RX)                                          BUILTIN\Administrateurs:(OI)(CI)(F)                                          AUTORITE NT\Système:(OI)(CI)(F) {noformat}
    • QA Risk Assessment:
      Manual
    • QA Risk Assessment Reason:
      We should verify this change

      Description

      Hello together,

      i try to install the Puppet Agent on Windows under a Windows Domain User like this:

      msiexec /norestart /i puppet-agent-1.8.1-x64.msi PUPPET_AGENT_ACCOUNT_DOMAIN=my-domain.de PUPPET_AGENT_ACCOUNT_USER=username PUPPET_AGENT_ACCOUNT_PASSWORD=userpw
      

      if i do this, the puppet installer raise an error with the message:

      Failed to add user to group (-2147022676 username Administrators)
      

      from this message, iam confused. Because the group "Administrators" does exists (the most time) only on english operating systems. In German for example, the group is named "Administratoren" instead of "Administrators".

      I dont know if its a problem with my infrastructure, but i guess from this message, that the puppet agent just cant handle other operating system languages. That meens, that the Puppet Agent can run only as the normal local Administrator.

      What you think?

      Best Regards

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                Andoreasu Andoreasu Pek
                QA Contact:
                Eric Delaney
              • Votes:
                1 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Zendesk Support