When trying to use an SSL cert, Exec[Build cert hash] fails, because no path is specified

[nealian]

This is on a Fedora machine, but the error itself lies in the lack of path attribute in the exec.

Error: Parameter unless failed on Exec[Build cert hash]: 'test -f /etc/openldap/certs/$(openssl x509 -noout -hash -in /etc/openldap/certs/ourCert.pem).0' is not qualified and no path was specified. Please qualify the command or specify a path. at /etc/puppet/modules/ldap/manifests/init.pp:221

[torian]

What version of Fedora are you using ?

[torian]

This is due to the Fedora versioning scheme and $osfamily/$operatingsystemmajrelease support in params.pp.
There is a case that sets the value of cacertdir, basically because it changed in rhel 6 (5: cacertdir / 6: certs). The case evaluates only major version 5 or it defaults to values for 6.

[nealian]

I am running Fedora 19 stable; however, that's REALLY not where the error is. It's in the first word of the Exec command; "test". Here, the error says "test is not fully qualified and no path was specified". The exec itself needs a path attribute (Something like "['/bin', '/usr/bin', '/usr/local/bin']"). Either that, or the instructions should include "Exec { path => '/path/to/binaries', }".

Also, in all versions of RHEL I have access to, the path is "cacerts". The "certs" path exists in 6, true, but we're using a CA's cert. In RHEL 4, 5, and 6 (I can't verify anything older than that), the cacert path is "/etc/openldap/cacerts".

I'd love it if Puppet were able to just use the system PATH so we didn't have to worry about this, but that doesn't look like that'll happen.

[nealian]

I'd be happy to write it up and submit a PR.

[torian]

You're right, I mis read the issue.

I was trying to reproduce it, but couldn't get to it. I realized that it is do to my config in site.pp. I golbally set the path parameter for exec this way:

Exec { path => "/bin:/usr/bin:/sbin:/usr/sbin" }

But I suppose this is not something everyone does. Thanks for the hint. A patch in on its way.

[torian]

Should be fixed in the latest commit. Check it out and let me know.

[nealian]

As referenced in #11, the patches for the exec led to successful execution; however, the path should also be added to manifests/server/master.pp and manifests/server/slave.pp. As far as this particular bug is concerned, this is a closed issue, but those should be added.

[torian]

ACK. I just added the path param to the latest commit