{"action":"created","issue":{"url":"https://api.github.com/repos/jtopjian/puppet-sshkeys/issues/17","labels_url":"https://api.github.com/repos/jtopjian/puppet-sshkeys/issues/17/labels{/name}","comments_url":"https://api.github.com/repos/jtopjian/puppet-sshkeys/issues/17/comments","events_url":"https://api.github.com/repos/jtopjian/puppet-sshkeys/issues/17/events","html_url":"https://github.com/jtopjian/puppet-sshkeys/issues/17","id":59975196,"number":17,"title":"homedir / pubkey facts mount all automounted home directories","user":{"login":"esalberg","id":9370354,"avatar_url":"https://avatars.githubusercontent.com/u/9370354?v=3","gravatar_id":"","url":"https://api.github.com/users/esalberg","html_url":"https://github.com/esalberg","followers_url":"https://api.github.com/users/esalberg/followers","following_url":"https://api.github.com/users/esalberg/following{/other_user}","gists_url":"https://api.github.com/users/esalberg/gists{/gist_id}","starred_url":"https://api.github.com/users/esalberg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/esalberg/subscriptions","organizations_url":"https://api.github.com/users/esalberg/orgs","repos_url":"https://api.github.com/users/esalberg/repos","events_url":"https://api.github.com/users/esalberg/events{/privacy}","received_events_url":"https://api.github.com/users/esalberg/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-03-05T16:20:29Z","updated_at":"2015-03-06T23:33:31Z","closed_at":null,"body":"We automount home directories for users depending on whether or not they're logged in to a server.  After implementing the module, we noticed that all home directories were being automounted regardless.  I'm pretty sure this is because of the ruby facts to collect all user home dirs and keys.\r\n\r\n(As a side note, we have a central AD store for users, so they're not actually in the /etc/passwd file.  However, the Ruby etc library uses getent versus parsing the /etc/passwd file directly - in the latter case, I don't think we'd be having this issue.)\r\n\r\nWe don't actually care about getting the user home dirs / public keys as facts right now, but I can't see any way to gate whether or not to set that information other than removing the fact files, or even to restrict the facts to specific users (which would lower the impact at least).  Do you have any ideas?"},"comment":{"url":"https://api.github.com/repos/jtopjian/puppet-sshkeys/issues/comments/77655885","html_url":"https://github.com/jtopjian/puppet-sshkeys/issues/17#issuecomment-77655885","issue_url":"https://api.github.com/repos/jtopjian/puppet-sshkeys/issues/17","id":77655885,"user":{"login":"esalberg","id":9370354,"avatar_url":"https://avatars.githubusercontent.com/u/9370354?v=3","gravatar_id":"","url":"https://api.github.com/users/esalberg","html_url":"https://github.com/esalberg","followers_url":"https://api.github.com/users/esalberg/followers","following_url":"https://api.github.com/users/esalberg/following{/other_user}","gists_url":"https://api.github.com/users/esalberg/gists{/gist_id}","starred_url":"https://api.github.com/users/esalberg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/esalberg/subscriptions","organizations_url":"https://api.github.com/users/esalberg/orgs","repos_url":"https://api.github.com/users/esalberg/repos","events_url":"https://api.github.com/users/esalberg/events{/privacy}","received_events_url":"https://api.github.com/users/esalberg/received_events","type":"User","site_admin":false},"created_at":"2015-03-06T23:33:31Z","updated_at":"2015-03-06T23:33:31Z","body":"The testing worked - I did need to copy your new fact code into the sshpubkey.rb fact as well (as I'm sure you already knew, but it was confusing me for a while, since the home directories looked right but the pubkeys were wrong).\r\n\r\nThis definitely resolves the biggest issue for us (mounting of the home directories).\r\n-----------------------------\r\n\r\nIdeally, I think what I'd really like - although this is probably more difficult - is a way to specify which users should have their homedirs and pubkeys fetched.  If I could do that, then using the original code would be fine (potentially better, as able to get ldap users' keys as well).\r\n\r\nAnother option would be to confine the fact based off another fact (i.e. whether or not to set the homedirs / pubkeys), but since it would be an arbitrary one, it would probably have to be an external fact, and thus the first time through, all the homedirs would get mounted (but they should time out, so that would be transient)."}}