# RE: (FIXED!) ldap users (after ldap config) in chef run

**URL:** <https://discourse.chef.io/t/re-fixed-ldap-users-after-ldap-config-in-chef-run/2582>\
**Category:** Chef Infra (archive)\
**Created:** [March 21, 2012, 8:52pm UTC](https://discourse.chef.io/t/re-fixed-ldap-users-after-ldap-config-in-chef-run/2582 "2012-03-21T20:52:40Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Van\_Fossan\_Randy](https://avatars.discourse-cdn.com/v4/letter/v/8797f3/32.png) [@Van\_Fossan\_Randy](https://discourse.chef.io/u/Van_Fossan_Randy)\
**Post date:** [March 21, 2012, 8:52pm UTC](https://discourse.chef.io/t/re-fixed-ldap-users-after-ldap-config-in-chef-run/2582/1 "2012-03-21T20:52:40Z")

</div>

I just needed to rerun ohai after configuring ldap…

[http://lists.opscode.com/sympa/arc/chef/2010-07/msg00234.html](http://lists.opscode.com/sympa/arc/chef/2010-07/msg00234.html)

## If you configure ldap for the first time, ohai will not know about

## the accounts within that run.

ruby\_block “reload\_ohai” do

block do

```
ohai = Ohai::System.new

ohai.all_plugins

node.automatic_attrs = ohai.data

node.save

```

end

action :nothing

end

…

…

# Install the template

template “/etc/ldap.conf” do

source “ldap.conf.erb”

owner “root”

group “root”

mode 0644

notifies :create, resources(:ruby\_block =\> ‘reload\_ohai’),  
:immediately

end

From: Van Fossan,Randy  
Sent: Wednesday, March 21, 2012 3:22 PM  
To: [chef@lists.opscode.com](mailto:chef@lists.opscode.com)  
Subject: ldap users (after ldap config) in chef run

I have a base role that configures ldap on the client and cycles the  
nscd daemon. Later in that role I try to create some directories  
using “owner” and “group” from these ldap accounts. It always fails on  
the first pass through. If I run it again, it will work fine.

I suspect that the chef run cannot yet see these accounts until after  
the chef run is complete. If I run 'getent passwd | grep account’  
right after the chef run, I can indeed see the account.

Anyone have any idea how to deal with ldap account changes within a chef  
run? Does ohai need to be rerun in the middle of the run somehow?

Thanks

Randy