Skip to content
Snippets Groups Projects
Commit 8b318c2e authored by Hannes Braun's avatar Hannes Braun :upside_down:
Browse files

Added capability to handle passwords

Role can now create users with passwords.
Will not set a password, even if provided, for users that shall be sudo.
parent 630e814d
No related branches found
No related tags found
No related merge requests found
...@@ -19,7 +19,7 @@ roles: ...@@ -19,7 +19,7 @@ roles:
- name: role-manage-user - name: role-manage-user
src: https://25_read_ansible_roles:glpat-5Ci385Nui9Uvyy8dQcuC@git.slub-dresden.de/ansible/referat25/role-manage-users.git src: https://25_read_ansible_roles:glpat-5Ci385Nui9Uvyy8dQcuC@git.slub-dresden.de/ansible/referat25/role-manage-users.git
scm: git scm: git
version: v1.0 version: v1.1 # or whatever version you need
``` ```
```bash ```bash
...@@ -32,6 +32,8 @@ Provide valid variables and include role inside your playbook. ...@@ -32,6 +32,8 @@ Provide valid variables and include role inside your playbook.
For variables see `defaults/main.yml`. For variables see `defaults/main.yml`.
Note: Users with the variable `sudo: true` can not have a password. A set password will be ignored.
## License ## License
For open source projects, say how it is licensed. For open source projects, say how it is licensed.
...@@ -2,9 +2,10 @@ ...@@ -2,9 +2,10 @@
human_users: human_users:
# - name: "dummy" # - name: "dummy"
# shell: /bin/bash # shell: /bin/bash
# password:
# groups: "dummy" # groups: "dummy"
# extra_groups: "ssh" # extra_groups: "ssh"
# ssh_key_file: "claussni.pub" # ssh_key_file: "dummy.pub"
# ssh_key_url: https://git.slub-dresden.de/{{ name }}.keys # ssh_key_url: https://git.slub-dresden.de/{{ name }}.keys
# sudo: false | true # sudo: false | true
......
...@@ -19,11 +19,12 @@ ...@@ -19,11 +19,12 @@
user: user:
name: "{{ item.name }}" name: "{{ item.name }}"
shell: "{{ item.shell | default('/bin/sh') }}" shell: "{{ item.shell | default('/bin/sh') }}"
password_lock: true password: "{% if item.sudo == false %}{{ item.password }}{% endif %}"
password_lock: "{{ item.sudo }}"
with_items: "{{ human_users }}" with_items: "{{ human_users }}"
become: true become: true
- name: make user sudo if - name: Make user sudo if variables say so
ansible.builtin.template: ansible.builtin.template:
src: etc/sudoers.d/sudoers-user-file.jinja2 src: etc/sudoers.d/sudoers-user-file.jinja2
dest: /etc/sudoers.d/{{ item.name }} dest: /etc/sudoers.d/{{ item.name }}
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment