Uploaded image for project: 'Puppet'
  1. Puppet
  2. PUP-5538

Puppet fails to convert Windows Unicode group or user names to sids

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: PUP 3.8.4, PUP 4.3.0
    • Fix Version/s: PUP 4.3.2
    • Component/s: Windows
    • Release Notes:
      Bug Fix
    • Release Notes Summary:
      Hide
      The handling of Unicode user and group names in Windows was previously deficient, and could present a number of errors when used in manifests, depending on the characters used in the name and the current local codepage. The user/group might fail to be created, might be created with the wrong characters, or might present failures on subsequent runs after initial creation. Using the SID of the user/group as a workaround could also fail. These issues have been corrected.
      Show
      The handling of Unicode user and group names in Windows was previously deficient, and could present a number of errors when used in manifests, depending on the characters used in the name and the current local codepage. The user/group might fail to be created, might be created with the wrong characters, or might present failures on subsequent runs after initial creation. Using the SID of the user/group as a workaround could also fail. These issues have been corrected.

      Description

      The win32-security gem that Puppet uses for SID conversion uses ANSI versions of APIs that can make it fail to convert Unicode group / user names to SIDs properly.

      https://github.com/puppetlabs/puppet-win32-ruby/blob/2.1.x-x64/ruby/lib/ruby/gems/2.1.0/gems/win32-security-0.2.5/lib/win32/security/windows/functions.rb#L79-L80

        Attachments

        1. umlat-ss1.PNG
          umlat-ss1.PNG
          12 kB
        2. umlat-ss2.PNG
          umlat-ss2.PNG
          11 kB
        3. umlat-ss3.PNG
          umlat-ss3.PNG
          12 kB
        4. umlat-ss4.PNG
          umlat-ss4.PNG
          10 kB
        5. umlat-ss5.PNG
          umlat-ss5.PNG
          10 kB

          Issue Links

            Activity

              People

              • Assignee:
                ethan Ethan Brown
                Reporter:
                ethan Ethan Brown
                QA Contact:
                Ryan Gard
              • Votes:
                0 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Zendesk Support