Commit Graph

6 Commits

Author SHA1 Message Date
Patrick Marchand 2c1ec040d1 Simplify user subset creation
Instead of tags, allow only one subset of users to be created at a time.
2022-08-24 09:05:29 -04:00
Patrick Marchand 9dfcfe1ef3 Made it possible to only create a subset of users
gitea/ansible-roles/pipeline/head This commit looks good Details
The evolinux_users_create variable is a list of tags that defaults to ['active'].
Only the users that have one of the tags in the evolinux_users_create list will be created.
2022-08-23 20:18:45 -04:00
Jérémy Lecour c87e3ee576 evolinux-users: add user to internal group if defined and Debian >= 9 2018-05-02 17:12:27 +02:00
Jérémy Lecour b01d9178d0 evolinux-users: split AllowGroups/AllowUsers modes
If an AllowGroups directive is found or when using Debian 9+,
we use the AllowGroups directive and comment AllowUsers that may be
already present.
When adding a user, we make sure that the allowed group exists
and the use is in that group, to be sure that at least this user
is allowed to connect.

In other situations, we use the AllowUsers directive.
2018-04-18 12:16:04 +02:00
Jérémy Lecour ae4b9675c2 evolix-users: disable root ssh login by default 2017-10-10 22:01:44 +02:00
Jérémy Lecour 7b88393ccf Refactoring of admin-users + evolinux-base roles
* rename admin-users to evolinux-users
* splitting the "sudo" part for users between jessie and stretch
* with stretch, the sudo group is customizable and properly configured
* import evolinux-users role from evolinux-base at proper time
  to ensure ssh connections are possible for other users before
  cutting root's access
* evomaintenance is also included in evolinux-base to have it available
  when users are created
2017-10-06 01:06:59 +02:00