Uploaded image for project: 'Puppet'
  1. Puppet
  2. PUP-5938

windows, user to groupassign to local administrators failed

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Normal
    • Resolution: Fixed
    • PUP 4.3.2
    • PUP 4.5.4, PUP 4.6.0
    • Types and Providers
    • Windows 7 x64, german Version in an active directory environment
      puppet-agent-1.3.5-x64

    • 2
    • Windows 2016-07-27
    • Bug Fix
    • Hide
      * On non-English versions of Windows where the Administrators group (or other well known accounts that are part of BUILTIN or NT AUTHORITY) are localized, Puppet may have been unable to add members to such groups (regardless of whether the group was referred to by it's English name, localized name, or it's canonical SID like S-1-5-32-544).
      * Fixed a minor performance issue when querying for Windows groups present on the host system.
      Show
      * On non-English versions of Windows where the Administrators group (or other well known accounts that are part of BUILTIN or NT AUTHORITY) are localized, Puppet may have been unable to add members to such groups (regardless of whether the group was referred to by it's English name, localized name, or it's canonical SID like S-1-5-32-544). * Fixed a minor performance issue when querying for Windows groups present on the host system.

    Description

      Trying to add an user to local Administrator Group fails with an error message

      C:\Temp>puppet apply  --verbose -e "user { 'bla': ensure  => 'present', comment
      => 'bla', groups  => ['S-1-5-32-544',], }"
      

      or also following version

      C:\Temp>puppet apply  --verbose -e "user { 'bla': ensure  => 'present', comment
      => 'bla', groups  => ['VORDEFINIERT\Administratoren',], }"
      Info: Loading facts
      Notice: Compiled catalog for xxxx in environment production in 0.14 seconds
      Info: Applying configuration version '1456004269'
      Error: ADSI connection error: failed to parse display name of moniker `WinNT://VORDEFINIERT/Administratoren,group'
          HRESULT error code:0x80070035
            Der Netzwerkpfad wurde nicht gefunden.
      Wrapped exception:
      failed to parse display name of moniker `WinNT://VORDEFINIERT/Administratoren,group'
          HRESULT error code:0x80070035
            Der Netzwerkpfad wurde nicht gefunden.
      Error: /Stage[main]/Main/User[bla]/ensure: change from absent to present failed:
       ADSI connection error: failed to parse display name of moniker `WinNT://VORDEFINIERT/Administratoren,group'
          HRESULT error code:0x80070035
            Der Netzwerkpfad wurde nicht gefunden.
      

      I've also tried following names Administratoren and hostname\Administratoren
      Yes I've to use the german group names, BUILTIN\Administrators and the other english names are not found.

      Attachments

        Issue Links

          Activity

            People

              erick Erick Banks
              phixom Alexander Wendland
              Votes:
              0 Vote for this issue
              Watchers:
              11 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Zendesk Support