2

I'm interested in learning to use Puppet. One example I see over and over again is user management. According the the Puppet website, "Configuration management – User accounts" is a feature that only exists on Puppet Enterprise. Yet the examples that I am seeing make no mention of requiring the enterprise version.

The FAQ states, in part:

We only have one, open source version of Puppet.

So does one need to pay for Puppet Enterprise if one wishes to manage users on more than 10 nodes at once? I'm guessing that there model might be akin to Red Hat? Are the packages in distrobutions like Ubuntu actually distrobutions of Puppet Enterprise?

ewwhite
  • 194,921
  • 91
  • 434
  • 799
Sean W.
  • 289
  • 2
  • 4
  • 12

1 Answers1

6

It depends on your authentication and user management infrastructure. Puppet Enterprise can do user management in LDAP, AD and apparently Google. See here: http://puppetlabs.com/blog/puppet-enterprise-2-6-is-now-available/

If you use none of that and just want to manage /etc/passwd and /etc/shadow, i.e. local users, or if you are proficient enough to implement your own Puppet module to manage your LDAP/AD users, then you certainly don't need Puppet Enterprise. Puppet has built-in support for users and groups, see here: https://puppet.com/docs/puppet/latest/type.html#user and here: https://puppet.com/docs/puppet/latest/type.html#group

This blog post is also interesting for efficiently managing local user accounts: http://www.craigdunn.org/2011/03/puppet-working-with-define-based-virtuals/

You can always install the latest Puppet packages from the official Puppetlabs repos: http://yum.puppetlabs.com/ and http://apt.puppetlabs.com/. And no, Puppet packages in Ubuntu are not based on Puppet Enterprise.

рüффп
  • 620
  • 1
  • 11
  • 24
daff
  • 4,729
  • 2
  • 26
  • 27
  • 3
    Your first paragraphs link clearly states that the "support" for AD/LDAP is for allowing LDAP users to _login to the web interface_, and not for managing users in AD/LDAP. Quote: "Now, _users of Puppet Enterprise_ can be managed and authenticated leveraging their existing authentication solution. - " You other paragraphs and links are accurate. – Not Now Sep 18 '13 at 02:29