Uploaded image for project: 'Puppet'
  1. Puppet
  2. PUP-5938

windows, user to groupassign to local administrators failed

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Normal
    • Resolution: Fixed
    • Affects Version/s: PUP 4.3.2
    • Fix Version/s: PUP 4.5.4, PUP 4.6.0
    • Component/s: Types and Providers
    • Labels:
    • Environment:

      Windows 7 x64, german Version in an active directory environment
      puppet-agent-1.3.5-x64

    • Template:
    • Story Points:
      2
    • Sprint:
      Windows 2016-07-27
    • Release Notes:
      Bug Fix
    • Release Notes Summary:
      Hide
      * On non-English versions of Windows where the Administrators group (or other well known accounts that are part of BUILTIN or NT AUTHORITY) are localized, Puppet may have been unable to add members to such groups (regardless of whether the group was referred to by it's English name, localized name, or it's canonical SID like S-1-5-32-544).
      * Fixed a minor performance issue when querying for Windows groups present on the host system.
      Show
      * On non-English versions of Windows where the Administrators group (or other well known accounts that are part of BUILTIN or NT AUTHORITY) are localized, Puppet may have been unable to add members to such groups (regardless of whether the group was referred to by it's English name, localized name, or it's canonical SID like S-1-5-32-544). * Fixed a minor performance issue when querying for Windows groups present on the host system.

      Description

      Trying to add an user to local Administrator Group fails with an error message

      C:\Temp>puppet apply  --verbose -e "user { 'bla': ensure  => 'present', comment
      => 'bla', groups  => ['S-1-5-32-544',], }"
      

      or also following version

      C:\Temp>puppet apply  --verbose -e "user { 'bla': ensure  => 'present', comment
      => 'bla', groups  => ['VORDEFINIERT\Administratoren',], }"
      Info: Loading facts
      Notice: Compiled catalog for xxxx in environment production in 0.14 seconds
      Info: Applying configuration version '1456004269'
      Error: ADSI connection error: failed to parse display name of moniker `WinNT://VORDEFINIERT/Administratoren,group'
          HRESULT error code:0x80070035
            Der Netzwerkpfad wurde nicht gefunden.
      Wrapped exception:
      failed to parse display name of moniker `WinNT://VORDEFINIERT/Administratoren,group'
          HRESULT error code:0x80070035
            Der Netzwerkpfad wurde nicht gefunden.
      Error: /Stage[main]/Main/User[bla]/ensure: change from absent to present failed:
       ADSI connection error: failed to parse display name of moniker `WinNT://VORDEFINIERT/Administratoren,group'
          HRESULT error code:0x80070035
            Der Netzwerkpfad wurde nicht gefunden.
      

      I've also tried following names Administratoren and hostname\Administratoren
      Yes I've to use the german group names, BUILTIN\Administrators and the other english names are not found.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                erick Erick Banks
                Reporter:
                phixom Alexander Wendland
              • Votes:
                0 Vote for this issue
                Watchers:
                11 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Zendesk Support