{"action":"opened","issue":{"url":"https://api.github.com/repos/TAMUArch/cookbook.windows_ad/issues/96","repository_url":"https://api.github.com/repos/TAMUArch/cookbook.windows_ad","labels_url":"https://api.github.com/repos/TAMUArch/cookbook.windows_ad/issues/96/labels{/name}","comments_url":"https://api.github.com/repos/TAMUArch/cookbook.windows_ad/issues/96/comments","events_url":"https://api.github.com/repos/TAMUArch/cookbook.windows_ad/issues/96/events","html_url":"https://github.com/TAMUArch/cookbook.windows_ad/issues/96","id":168250709,"number":96,"title":"Cannot add user to domain - You must hold the 'Replace a process level token'","user":{"login":"dcallagh","id":491115,"avatar_url":"https://avatars.githubusercontent.com/u/491115?v=3","gravatar_id":"","url":"https://api.github.com/users/dcallagh","html_url":"https://github.com/dcallagh","followers_url":"https://api.github.com/users/dcallagh/followers","following_url":"https://api.github.com/users/dcallagh/following{/other_user}","gists_url":"https://api.github.com/users/dcallagh/gists{/gist_id}","starred_url":"https://api.github.com/users/dcallagh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dcallagh/subscriptions","organizations_url":"https://api.github.com/users/dcallagh/orgs","repos_url":"https://api.github.com/users/dcallagh/repos","events_url":"https://api.github.com/users/dcallagh/events{/privacy}","received_events_url":"https://api.github.com/users/dcallagh/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-07-29T04:56:48Z","updated_at":"2016-07-29T04:56:48Z","closed_at":null,"body":"Using the provided user add example.\r\nAdministrator is member of domain & enterprise admin\r\nHave changed the password for Administrator in th edomain to see if this was the issue (local V domain) no luck.\r\nComes up with No error - CreateProcessAsUserW (You must hold the 'Replace a process level token' permission)\r\n\r\nVagrant is 1.8.1\r\n\r\n$ vagrant provision win2012r2core\r\nRSA 1024 bit CA certificates are loaded due to old openssl compatibility\r\n==> win2012r2core: Running provisioner: chef_zero...\r\nRSA 1024 bit CA certificates are loaded due to old openssl compatibility\r\nRSA 1024 bit CA certificates are loaded due to old openssl compatibility\r\n==> win2012r2core: Detected Chef (latest) is already installed\r\n==> win2012r2core: Generating chef JSON and uploading...\r\nRSA 1024 bit CA certificates are loaded due to old openssl compatibility\r\nRSA 1024 bit CA certificates are loaded due to old openssl compatibility\r\n==> win2012r2core: Running chef-client (local-mode)...\r\n==> win2012r2core: [2016-07-28T21:50:34-07:00] INFO: Started chef-zero at chefzero://localhost:8889 with repository at C:/vagrant-chef/7b48616b1e74ef20bc277bc793cfd70a\r\n==> win2012r2core:   One version per cookbook\r\n==> win2012r2core:   nodes at C:/vagrant-chef/33d5b31c47b884fc6457ddac1602841f/nodes\r\n==> win2012r2core:\r\n==> win2012r2core: Starting Chef Client, version 12.13.13\r\n==> win2012r2core: [2016-07-28T21:50:34-07:00] INFO: *** Chef 12.13.13 ***\r\n==> win2012r2core: [2016-07-28T21:50:34-07:00] INFO: Platform: x64-mingw32\r\n==> win2012r2core: [2016-07-28T21:50:34-07:00] INFO: Chef-client pid: 696\r\n==> win2012r2core: [2016-07-28T21:51:03-07:00] INFO: GET /organizations/chef/nodes/vagrant-2782842d\r\n==> win2012r2core: [2016-07-28T21:51:03-07:00] INFO: Setting the run_list to [\"recipe[windows_ad::binduser]\"] from CLI options\r\n==> win2012r2core:\r\n==> win2012r2core: [2016-07-28T21:51:03-07:00] INFO: Run List is [recipe[windows_ad::binduser]]\r\n==> win2012r2core: [2016-07-28T21:51:03-07:00] INFO: Run List expands to [windows_ad::binduser]\r\n==> win2012r2core: [2016-07-28T21:51:03-07:00] INFO: Starting Chef Run for vagrant-2782842d\r\n==> win2012r2core: [2016-07-28T21:51:03-07:00] INFO: Running start handlers\r\n==> win2012r2core: [2016-07-28T21:51:03-07:00] INFO: Start handlers complete.\r\n==> win2012r2core: resolving cookbooks for run list: [\"windows_ad::binduser\"]\r\n==> win2012r2core: [2016-07-28T21:51:03-07:00] INFO: POST /organizations/chef/environments/_default/cookbook_versions\r\n==> win2012r2core: --- POST BODY ---\r\n==> win2012r2core: {\"run_list\":[\"windows_ad::binduser\"]}\r\n==> win2012r2core: --- END POST BODY ---\r\n==> win2012r2core: [2016-07-28T21:51:05-07:00] INFO: Loading cookbooks [windows_ad@0.5.3, windows@1.44.1, chef_handler@1.4.0]\r\n==> win2012r2core: Synchronizing Cookbooks:\r\n==> win2012r2core:\r\n==> win2012r2core:   - windows_ad (0.5.3)\r\n==> win2012r2core:   - chef_handler (1.4.0)\r\n==> win2012r2core:\r\n==> win2012r2core:   - windows (1.44.1)\r\n==> win2012r2core: Installing Cookbook Gems:\r\n==> win2012r2core: Compiling Cookbooks...\r\n==> win2012r2core: C:/opscode/chef/embedded/lib/ruby/2.1.0/x64-mingw32/dl.so: warning: already initialized constant DL::RUBY_FREE\r\n==> win2012r2core: C:/opscode/chef/embedded/lib/ruby/gems/2.1.0/gems/net-ssh-3.2.0/lib/net/ssh/authentication/pageant.rb:16: warning: previous definition of RUBY_FREE was here\r\n==> win2012r2core: DL is deprecated, please use Fiddle\r\n==> win2012r2core: Converging 2 resources\r\n==> win2012r2core:\r\n==> win2012r2core: Recipe: windows_ad::binduser\r\n==> win2012r2core:   * windows_ad_user[Joe Smith] action create\r\n==> win2012r2core:\r\n==> win2012r2core:\r\n==> win2012r2core:     ================================================================================\r\n==> win2012r2core:     Error executing action `create` on resource 'windows_ad_user[Joe Smith]'\r\n==> win2012r2core:     ================================================================================\r\n==> win2012r2core:\r\n==> win2012r2core:     Errno::NOERROR\r\n==> win2012r2core:     --------------\r\n==> win2012r2core:     No error - CreateProcessAsUserW (You must hold the 'Replace a process level token' permission)\r\n==> win2012r2core:\r\n==> win2012r2core:     Cookbook Trace:\r\n==> win2012r2core:     ---------------\r\n==> win2012r2core:     c:/var/chef/cache/cookbooks/windows_ad/libraries/cmd_helper.rb:39:in `shell_out'\r\n==> win2012r2core:     c:/var/chef/cache/cookbooks/windows_ad/providers/user.rb:123:in `exists?'\r\n==> win2012r2core:     c:/var/chef/cache/cookbooks/windows_ad/providers/user.rb:29:in `block in class_from_file'\r\n==> win2012r2core:\r\n==> win2012r2core:     Resource Declaration:\r\n==> win2012r2core:     ---------------------\r\n==> win2012r2core:     # In c:/var/chef/cache/cookbooks/windows_ad/recipes/binduser.rb\r\n==> win2012r2core:\r\n==> win2012r2core:       3: windows_ad_user \"Joe Smith\" do\r\n==> win2012r2core:       4:   action :create\r\n==> win2012r2core:       5:   domain_name \"contoso.com\"\r\n==> win2012r2core:       6:   ou \"users\"\r\n==> win2012r2core:       7:   options ({ \"samid\" => \"JSmith\",\r\n==> win2012r2core:       8:          \"upn\" => \"JSmith@contoso.com\",\r\n==> win2012r2core:       9:          \"fn\" => \"Joe\",\r\n==> win2012r2core:      10:          \"ln\" => \"Smith\",\r\n==> win2012r2core:      11:          \"display\" => \"Smith, Joe\",\r\n==> win2012r2core:      12:          \"disabled\" => \"no\",\r\n==> win2012r2core:      13:          \"pwd\" => \"Passw0rd\"\r\n==> win2012r2core:      14:        })\r\n==> win2012r2core:      15:   cmd_user \"Administrator\"\r\n==> win2012r2core:      16:   cmd_pass \"blah\"\r\n==> win2012r2core:      17:   cmd_domain \"contoso.com\"\r\n==> win2012r2core:      18: end\r\n==> win2012r2core:      19: windows_ad_group_member 'Joe Smith' do\r\n==> win2012r2core:      20:   action :add\r\n==> win2012r2core:      21:   group_name  'Domain Admins'\r\n==> win2012r2core:      22:   domain_name 'contoso.com'\r\n==> win2012r2core:      23:   user_ou 'Users'\r\n==> win2012r2core:      24:   group_ou 'AD/Users'\r\n==> win2012r2core:      25:   cmd_user \"Administrator\"\r\n==> win2012r2core:      26:   cmd_pass \"blah\"\r\n==> win2012r2core:      27:   cmd_domain \"contoso.com\"\r\n==> win2012r2core:      28: end\r\n==> win2012r2core:\r\n==> win2012r2core:     Compiled Resource:\r\n==> win2012r2core:     ------------------\r\n==> win2012r2core:     # Declared in c:/var/chef/cache/cookbooks/windows_ad/recipes/binduser.rb:3:in `from_file'\r\n==> win2012r2core:\r\n==> win2012r2core:     windows_ad_user(\"Joe Smith\") do\r\n==> win2012r2core:       action [:create]\r\n==> win2012r2core:       retries 0\r\n==> win2012r2core:       retry_delay 2\r\n==> win2012r2core:       default_guard_interpreter :default\r\n==> win2012r2core:       declared_type :windows_ad_user\r\n==> win2012r2core:       cookbook_name \"windows_ad\"\r\n==> win2012r2core:       recipe_name \"binduser\"\r\n==> win2012r2core:       domain_name \"contoso.com\"\r\n==> win2012r2core:       ou \"users\"\r\n==> win2012r2core:       options {\"samid\"=>\"JSmith\", \"upn\"=>\"JSmith@contoso.com\", \"fn\"=>\"Joe\", \"ln\"=>\"Smith\", \"display\"=>\"Smith, Joe\", \"disabled\"=>\"no\", \"pwd\"=>\"Passw0rd\"}\r\n==> win2012r2core:       cmd_user \"Administrator\"\r\n==> win2012r2core:       cmd_pass \"blah\"\r\n==> win2012r2core:       cmd_domain \"contoso.com\"\r\n==> win2012r2core:     end\r\n==> win2012r2core:\r\n==> win2012r2core:     Platform:\r\n==> win2012r2core:     ---------\r\n==> win2012r2core:     x64-mingw32\r\n==> win2012r2core:\r\n==> win2012r2core: [2016-07-28T21:51:06-07:00] INFO: Running queued delayed notifications before re-raising exception\r\n==> win2012r2core:\r\n==> win2012r2core: Running handlers:\r\n==> win2012r2core: [2016-07-28T21:51:06-07:00] ERROR: Running exception handlers\r\n==> win2012r2core: Running handlers complete\r\n==> win2012r2core: [2016-07-28T21:51:06-07:00] ERROR: Exception handlers complete\r\n==> win2012r2core: Chef Client failed. 0 resources updated in 32 seconds\r\n==> win2012r2core: [2016-07-28T21:51:06-07:00] FATAL: Stacktrace dumped to c:/var/chef/cache/chef-stacktrace.out\r\n==> win2012r2core: [2016-07-28T21:51:06-07:00] FATAL: Please provide the contents of the stacktrace.out file if you file a bug report\r\n==> win2012r2core: [2016-07-28T21:51:06-07:00] FATAL: Errno::NOERROR: windows_ad_user[Joe Smith] (windows_ad::binduser line 3) had an error: Errno::NOERROR: No error - CreateProcessAsUserW (You must hold the 'Replace a process level token' permission)\r\nChef never successfully completed! Any errors should be visible in the\r\noutput above. Please fix your recipes so that they properly complete.\r\n"}}
{"actor":{"display_login":"dcallagh"}}