evolix
/
ansible-roles
22
2
Fork 2
Code Issues 61 Pull Requests 18 Releases 32 Wiki Activity

evolinux-users: cover more cases for AllowUsers/Groups in sshd config

This commit is contained in:
Jérémy Lecour 2018-04-18 18:20:23 +02:00 committed by Jérémy Lecour
parent 2f631f1ae7
commit 43d86f5541
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
evolinux-users/tasks/ssh.yml
View File

@ -22,11 +22,15 @@
var: grep_allowusers_ssh
verbosity: 1
- assert:
that: "not (grep_allowusers_ssh.rc == 0 and grep_allowgroups_ssh.rc == 0)"
msg: "We can't deal with AllowUsers and AllowGroups at the same time"
- set_fact:
# If "AllowGroups is present" or "AllowUsers is absent and Debian 9+",
ssh_allowgroups: "{{ (grep_allowgroups_ssh.rc == 0) or (grep_allowusers_ssh.rc != 0 and (ansible_distribution_major_version | version_compare('9', '>='))) }}"
# If "AllowGroups is absent" and "Debian <9"
ssh_allowusers: "{{ (grep_allowgroups_ssh.rc != 0) and (ansible_distribution_major_version | version_compare('9', '<')) }}"
# If "AllowGroups is absent" and "AllowUsers is absent or Debian <9"
ssh_allowusers: "{{ (grep_allowusers_ssh.rc == 0) or (grep_allowgroups_ssh.rc != 0 and (ansible_distribution_major_version | version_compare('9', '<'))) }}"
- debug:
var: ssh_allowgroups