group資源

group的主要功能是管理系統組,包含組的名字、增/減組、組成員、組的gid等.

group { ‘資源標題‘:
    allowdupe
    ensure
    gid
    members
    name
    allowdupe
    provider
}

allowdupe：是否允許系統存在同樣的gid，false表示不允許設置相同的gid,true表示可以設置相同的gid.

ensure:創建或者刪除，設置absent為刪除組，設置present為創建組.

gid:設置組的gid，必須是數字，如果不指定，將自動分配，不同的系統自動分配的算法不一樣，不推薦使用自動分配gid.

members:該組的成員.

name:該用戶組的名字，默認與標題相同.

allowdupe：準許使用相同的gid，默認為false.

provider:支持的系統添加命令.

創建"meng"組的puppet代碼:

[[email protected] ~]# cat groupmeng.pp 
    group {‘meng‘:
    ensure => present,
    gid => ‘701‘,
}

運行結果:

[[email protected] ~]# puppet apply groupmeng.pp 
Notice: Compiled catalog for sh-web1.localdomain in environment production in 0.06 seconds
Notice: /Stage[main]/Main/Group[meng]/ensure: created
Notice: Finished catalog run in 0.08 seconds

查看是否創建:

[[email protected] ~]# cat /etc/group | grep meng
meng:x:701:

刪除"meng"組:

[[email protected] ~]# puppet apply groupmeng.pp 
Notice: Compiled catalog for sh-web1.localdomain in environment production in 0.06 seconds
Notice: /Stage[main]/Main/Group[meng]/ensure: removed
Notice: Finished catalog run in 0.06 seconds
[[email protected] ~]# cat /etc/group | grep meng
[[email protected] ~]#

問題：members參數，puppet3.8 members參數配置不成功,做過的嘗試？

1、member後面跟系統已存在的組，發現不行沒成功,不存在的組也不成功,官網給的解釋沒怎麽看懂？

官網鏈接:https://puppet.com/docs/puppet/5.2/types/group.html#group-attribute-members

members

The members of the group. For platforms or directory services where group membership is stored in the group objects, not the users. This parameter’s behavior can be configured with auth_membership.

members參數：組成員存儲在某個平臺或者目錄服務的組對象中，需要參數auth_membership.

[[email protected] ~]# cat groupmeng.pp 
group {‘meng‘:
     ensure   =>  present,
     gid      => ‘5560‘,
     auth_membership => yes,
     members  => [‘wangwu‘,‘lisi‘],
 }

 [[email protected] ~]# puppet apply groupmeng.pp 
Notice: Compiled catalog for sh-web1.localdomain in environment production in 0.06 seconds
Notice: /Stage[main]/Main/Group[meng]/ensure: created
Notice: Finished catalog run in 0.05 seconds
[[email protected] ~]# cat /etc/group
group   group-  
[[email protected] ~]# cat /etc/group | grep meng
meng:x:5560:

本文出自 “青衫解衣” 博客，請務必保留此出處http://215687833.blog.51cto.com/6724358/1972900

Puppet group資源介紹(二十三)