Pascal de Bruijn
2 years ago
1 changed files with 3 additions and 4 deletions
+ 3
- 4
users/googleauth.sls
View File
| {%- if 'google_auth' in user %} | {%- if 'google_auth' in user %} | ||||
| {%- for svc in user['google_auth'] %} | {%- for svc in user['google_auth'] %} | ||||
| {%- if user.get('google_2fa', True) %} | {%- if user.get('google_2fa', True) %} | ||||
| {%- set repl = '{0} {1} {2} {3} {4}{5}/{6}_{7} {8}\\n{9}'.format( | |||||
| {%- set repl = '{0} {1} {2} {3} {4}{5}/{6}_{7} {8}'.format( | |||||
| 'auth', | 'auth', | ||||
| '[success=done new_authtok_reqd=done default=die]', | '[success=done new_authtok_reqd=done default=die]', | ||||
| 'pam_google_authenticator.so', | 'pam_google_authenticator.so', | ||||
| '${USER}', | '${USER}', | ||||
| svc, | svc, | ||||
| 'echo_verification_code', | 'echo_verification_code', | ||||
| '@include common-auth', | |||||
| ) %} | ) %} | ||||
| users_googleauth-pam-{{ svc }}-{{ name }}: | users_googleauth-pam-{{ svc }}-{{ name }}: | ||||
| file.replace: | file.replace: | ||||
| - name: /etc/pam.d/{{ svc }} | - name: /etc/pam.d/{{ svc }} | ||||
| - pattern: "^@include common-auth" | |||||
| - repl: "{{ repl }}" | |||||
| - pattern: '^(@include[ \t]*common-auth)' | |||||
| - repl: '{{ repl }}\n\1' | |||||
| - unless: grep pam_google_authenticator.so /etc/pam.d/{{ svc }} | - unless: grep pam_google_authenticator.so /etc/pam.d/{{ svc }} | ||||
| - backup: .bak | - backup: .bak | ||||
| {%- endif %} | {%- endif %} |
Loading…