ansible-roles/evolinux-users
Jérémy Lecour b01d9178d0 evolinux-users: split AllowGroups/AllowUsers modes
If an AllowGroups directive is found or when using Debian 9+,
we use the AllowGroups directive and comment AllowUsers that may be
already present.
When adding a user, we make sure that the allowed group exists
and the use is in that group, to be sure that at least this user
is allowed to connect.

In other situations, we use the AllowUsers directive.
2018-04-18 12:16:04 +02:00
..
defaults evolinux-users: split AllowGroups/AllowUsers modes 2018-04-18 12:16:04 +02:00
handlers Refactoring of admin-users + evolinux-base roles 2017-10-06 01:06:59 +02:00
meta Refactoring of admin-users + evolinux-base roles 2017-10-06 01:06:59 +02:00
tasks evolinux-users: split AllowGroups/AllowUsers modes 2018-04-18 12:16:04 +02:00
templates evolinux-users: add check_minifirewall in sudoers commands 2018-04-06 10:36:48 +02:00
tests Refactoring of admin-users + evolinux-base roles 2017-10-06 01:06:59 +02:00
.kitchen.yml Refactoring of admin-users + evolinux-base roles 2017-10-06 01:06:59 +02:00
README.md Users can be added to secondary groups 2017-10-06 01:06:59 +02:00

evolinux-users

Creates evolinux users accounts, based on a configuration data structure.

Tasks

Everything is in the tasks/main.yml file.

Available variables

The variable evolinux_users must be a "dict" of one or more users :

evolinux_users:
  foo:
    name: foo
    uid: 1001
    fullname: 'Mr Foo'
    groups: "baz"
    password_hash: 'sdfgsdfgsdfgsdfg'
    ssh_key: 'ssh-rsa AZERTYXYZ'
  bar:
    name: bar
    uid: 1002
    fullname: 'Mr Bar'
    groups:
    - "baz"
    - "qux"
    password_hash: 'gsdfgsdfgsdfgsdf'
    ssh_keys:
      - 'ssh-rsa QWERTYUIOP'
      - 'ssh-ed25519 QWERTYUIOP'