gpasswd fails silently

[tnail]

I've got a system (RHEL 7.6, Open Source puppet 5.5, Accounts branch 2.0 ) that is trying to add a non-existent user (yeh, I need to fix the hiera data...) to a group, via gpasswd. And this fails, but doesn't actually emit an error:

Debug: Executing: '/bin/gpasswd -a va-user appadmin'
Debug: Success: /bin/gpasswd -a va-user 'appadmin'
Notice: /Stage[main]/Accounts/Accounts::Group[appadmin]/Group[appadmin]/members: members changed 'user1,user2,user3,user4' to 'user1,user2,user3,user4,va-user'
Debug: /Stage[main]/Accounts/Accounts::Group[appadmin]/Group[appadmin]: The container Accounts::Group[appadmin] will propagate my refresh event
Debug: Accounts::Group[appadmin]: The container Class[Accounts] will propagate my refresh event

If I try this command from the CLI on the system, I get an exit code of "3" and the command returns:

[/root]# gpasswd -a va-user appadmin
gpasswd: user 'va-user' does not exist
[/root]# echo $?
3

Is there any way I can get this to report as a failure, so I can try to see what's happening in my environment?

Cheers,

-=Tom Nail

[deric]

@tnail Just to be on the same page, you're config looks basically like this, right?

accounts::groups:
  appadmin:
    ensure: present
    members: ['user1', 'user2', 'user3', 'user4']
accounts::users:
  va-user:
    groups: ['appadmin']

Can you see in the logs any attempt to create the user account va-user before adding it to the group?

Which Puppet version do you exactly use? I've noticed broken tests with Puppet 5.5.17, but I'm not sure what's the cause.

[tnail]

[/root]# puppet --version 5.5.0 The hiera config is similar to what you posted, but more like: accounts::groups: appadmin: members: [ "va-user" ] accounts::users: user1: uid: #### gid: #### groups: [ "dba", "appadmin" ] user2: . . . Also, no, there is not any log of an attempt to create the user account before adding it to the group. I just get the groupmod entry: (/Stage[main]/Accounts/Accounts::Group[appadmin]/Group[appadmin]/members) members changed ‘user1,user2,user3,user4’ to ‘va-user,user1,user2,user3,user4’