Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FEATURE REQUEST] Allow creation of local users and groups #64256

Closed
bluesliverx opened this issue May 8, 2023 · 0 comments · Fixed by #64257
Closed

[FEATURE REQUEST] Allow creation of local users and groups #64256

bluesliverx opened this issue May 8, 2023 · 0 comments · Fixed by #64257
Assignees
Labels
Feature new functionality including changes to functionality and code refactors, etc. needs-triage

Comments

@bluesliverx
Copy link
Contributor

Is your feature request related to a problem? Please describe.
We manage user accounts and groups via LDAP, except in certain cases where a local account is required as well because of history/legacy/etc. We encountered race conditions where depending on if the LDAP user management was configured yet, the users and groups would not be created since they already existed in LDAP, but since they didn't exist on the local user database, processes would fail. We needed a way to be able to force creation of local users and groups

Describe the solution you'd like
We have created alternate versions of user/group modules that use a local flag to determine if local variants of system commands to manage user/groups (e.g. luseradd) were used or not.

Describe alternatives you've considered
Changing the Salt state ordering was not the right solution for us, since LDAP user management was often initialized before Salt was even bootstrapped in our environments. Additionally, machines could transition to different roles and need users created locally post-machine bootstrap.

Additional context
We engineered a solution with Salt 2018 and have been using it as a patched version of Salt since then. I have taken our changes and merged them with the latest changes in Salt and will be submitting a PR shortly.

@bluesliverx bluesliverx added Feature new functionality including changes to functionality and code refactors, etc. needs-triage labels May 8, 2023
@anilsil anilsil added this to the Chlorine v3007.0 milestone May 10, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Feature new functionality including changes to functionality and code refactors, etc. needs-triage
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants