Comments (10)
Its possibly postgresql but hard to say - can you show the full output of your run please?
from puppetlabs-puppetdb.
I'm running into this as well:
Notice: /Stage[main]/Puppetdb::Database::Postgresql_db/Postgresql::Db[puppetdb]/Postgresql::Database_user[puppetdb]/Postgresql::Role[puppetdb]/Postgresql_psql[ALTER ROLE "puppetdb" ENCRYPTED PASSWORD 'puppetdb']/command: command changed '' to 'ALTER ROLE "puppetdb" ENCRYPTED PASSWORD 'puppetdb''
Notice: Finished catalog run in 4.17 seconds
from puppetlabs-puppetdb.
I don't think it's a permissions issue. I think it has to do with the query being used to verify the user's existence in the pg_shadow table.
See line 82 of postgresql/manifests/role.pp
:
The unless
is trying to verify user puppetdb
exists with a passwd of $password_hash
. $password_hash
is simply the unhashed password passed down by the puppetdb module -- no hashing is ever done.
If the unless
query is modified to:
unless => "SELECT usename FROM pg_shadow WHERE usename='${username}' and passwd = 'md5' || md5('${password_hash}' || '${username}')"
Then everything works.
So I think this is a bug with the postgresql module?
from puppetlabs-puppetdb.
@kbarber My output is exactly/similar to jtopjian's.
@jtopjian That is what I had found as well. Have you tested the change to the unless parameter? Perhaps you or I could open a bug with the possible fix.
from puppetlabs-puppetdb.
@jtopjian @lieutdan13 yeah, sounds like postgresql. You guys want to re-open this in that project? BTW - I get the feeling something was merged in recently to solve this ... have a try at the latest postgresql, or 'master' from github.
from puppetlabs-puppetdb.
@lieutdan13 Yes, I tested the change and it looks good. I'll be in meetings for the next 4 hours, so if you're able to open a bug before that, please do. :)
@kbarber I'm testing against the latest postgresql module.
from puppetlabs-puppetdb.
@kbarber I am also using the latest postgresql module. I updated this morning.
@jtopjian I will open a bug in that project
Update: postgresql Issue: puppetlabs/puppetlabs-postgresql#216
from puppetlabs-puppetdb.
Actually, I should keep this open until the source issue is solved. If only for tracking purposes.
from puppetlabs-puppetdb.
This is fixed with release 2.4.1 of puppetlabs/postgresql.
from puppetlabs-puppetdb.
I have the same issue running 2.4.1. I defined this role:
postgresql::role {'pedrocr':
superuser => true,
createdb => true,
login => true,
require => Class["common::postgresql"],
}
and common::postgresql is just:
class common::postgresql {
class { '::postgresql':
charset => 'UTF8',
locale => 'en_US.UTF-8',
}
class { '::postgresql::server':
}
postgresql::database { ['template0', 'template1', 'postgres']:
update_charset => true,
}
}
(it would be just "include postgresql::database" if it wasn't for bug #196)
Here's the output of the run:
Notice: /Stage[main]/Battlestation::Databases/Postgresql::Role[pedrocr]/Postgresql_psql[ALTER ROLE "pedrocr" ]/command: command changed '' to 'ALTER ROLE "pedrocr" '
Could it be that the fix doesn't work if the role doesn't have a password at all?
from puppetlabs-puppetdb.
Related Issues (20)
- Convert system tests to vsphere and hosted on jenkins.puppetlabs.com HOT 2
- Add option to specify postgresql version HOT 2
- Upgrade tests to use rspec-system 2.x HOT 1
- Switch to using puppetlabs-postgresql 3.x
- puppetdb::master::config always performs puppetdb conn validation with SSL HOT 5
- Unable to set multiple -XX JVM options HOT 1
- Should support specifying the paths to the SSL cert, key & CA HOT 1
- Manifest should validate the passed parameters HOT 1
- puppetdb::master::config tries to validate using SSL port even when SSL is disabled
- Paginate Support for Large Queries HOT 1
- Declaring puppetdb::server does not inherit params.pp HOT 1
- Module is broken due to $::is_pe on puppet opensource HOT 4
- Modules version 7.14.0 not uploaded to the forge HOT 8
- Define multiple puppetdb servers in hiera HOT 2
- Support puppetlabs-postgresql version 10 HOT 5
- puppetdb and puppet postgres authentication method mismatch HOT 3
- Install fails if postgres_version is not set HOT 1
- Error 'has no parameter named port' HOT 1
- puppetdb fails to start after switching to v8.1.0 HOT 12
- Error while resolving custom fact fact='puppetdb_version' HOT 7
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from puppetlabs-puppetdb.