[PUP-9479] "Failed to initialize ACL: The parameter is incorrect" errors when changing windows permissions. Created: 2019/02/06 Updated: 2019/03/13 Resolved: 2019/03/13
|Reporter:||Paul H||Assignee:||Gheorghe Popescu|
|Labels:||needs_repro, permissions, type_and_provider, windows|
|Remaining Estimate:||Not Specified|
|Time Spent:||Not Specified|
|Original Estimate:||Not Specified|
|Template:||PUP Bug Template customfield_10700 295186|
|Sprint:||PR - 2019-03-06, PR - 2019-03-20|
|Method Found:||Needs Assessment|
|QA Risk Assessment:||Needs Assessment|
-Puppet version: 4.9.4
-Summary: After pushing an update to change the group of a powershell script from "Administrator" to "Administrators", a large number of managed hosts started to fail with "Failed to initialize ACL: The parameter is incorrect." errors. I'm speculating that this might be related to an sid conflict, as all of our hosts are joined to a domain and there is an administrators group with an sid that matches what appears for local groups.
Code before issue appeared:
Code after issue appeared:
Things to note:
|Comment by Paul H [ 2019/02/06 ]|
Please see the attached file (puppetrun.txt) for a puppet run with debug on.
|Comment by Gheorghe Popescu [ 2019/03/05 ]|
Paul H Cannot reproduce the issues
We tried to reproduce this issue(on puppet 4.9.4) with Domain Controller(default configuration) and above steps but have failed to encounter the error.
Can you share more details? Or highlight if there are any issues in our approach?
|Comment by Mihai Buzgau [ 2019/03/13 ]|
Paul H please reopen this ticket if you encounter the issue