user resource conflict with puppetlabs/apache: Duplicate declaration: User[www-data] is already declared about puppet-os-hardening HOT 11 CLOSED

FYI - as @raphink said, it is still being maintained - a new release covering Puppet 6 testing should be out soon too

from puppet-os-hardening.

Are you using Puppet Enterprise? If so, do you have the pe_environment parameter set to true?

from puppet-os-hardening.

For now, I'm just using community puppet. I might encounter enterprise later on.
Travis testing is kitchen/free puppet based

from puppet-os-hardening.

Put the user which is declared in two places into the parameter ignore_users, like this:

class { 'os_hardening':
  ignore_users => ['www-data'],
}

from puppet-os-hardening.

Thanks @mcgege!
exactly that and to be fair, there is a similar option manage_user in https://forge.puppet.com/puppetlabs/apache

from puppet-os-hardening.

A better way to fix this would be to use https://forge.puppet.com/crayfishx/purge instead of managing users manually:

purge { 'user':
  manage_property => 'shell',
  state           => $nologin_path,
  if              => ['uid', '<=', $maxid],
}

This allows to merge behavior with other modules managing their own users.

from puppet-os-hardening.

@raphink I agree ... but is this solution / module still maintained?

from puppet-os-hardening.

@mcgege as far as I know yes. I've contributed to it recently and @crayfishx was reactive on it.

from puppet-os-hardening.

Again: good idea ... I'll open a issue to implement this (either I find some time or someone else picks this up)

from puppet-os-hardening.

Just for documentation: The last ~2 years no reaction can be found on https://github.com/crayfishx/puppet-purge/

from puppet-os-hardening.

Put the user which is declared in two places into the parameter ignore_users, like this:

class { 'os_hardening':
  ignore_users => ['www-data'],
}

@mcgege But ignoring existing users is not hardening them, right? ;-) What the idea here: The existing users have to be hardened in the existing configuration code?

from puppet-os-hardening.