Maximilian Zettler
8c6bbafd9b
add ability to configure prime_group without gid ( #141 )
* add ability to configure prime_group without gid
8 yıl önce
Sonia Hamilton
e81f6e695c
temp fix on git executable
8 yıl önce
Fabian Niepelt
153d07452c
Add support for hash_password
8 yıl önce
Matthias Nüssle
0d7ca5728c
fix wrong variable name in absent_users
8 yıl önce
Niels Abspoel
15ce6493cc
fix warning on managed file state for /etc/sudoers.d/username
8 yıl önce
Eric Veiras Galisson
57fce16643
fixing removing of users based on pillar['absent_users'], fix #126
8 yıl önce
jraby
5538eb18ab
Support for optional_groups
8 yıl önce
Imran Iqbal
b94514529d
Display "managed by Salt" header in user sudoers files
9 yıl önce
Imran Iqbal
984317fca1
Use contents_pillar to work with multiple-line authorized_keys file
9 yıl önce
adnanJP
8aa062c08e
Properly handle dependencies on ssh_auth when home is not create with the formula.
8 yıl önce
Tom Duijf
2ac21426af
use already available home variable for user's ssh-key configuration
8 yıl önce
Raphaël Hertzog
cf122d1bd6
Create a system usergroup if user is a system user
If the user to be created is a system user, it makes no sense to create
him a primary group which is not a system group too.
8 yıl önce
Karsten Kosmala
c9fecc1d96
renamed variables
8 yıl önce
Karsten Kosmala
fa02b954a5
set user and group of user dir in pillar
8 yıl önce
Imran Iqbal
846634bfd7
Resolve `git.config` error where minion does not have Git installed #115
8 yıl önce
Karsten Kosmala
346463c7e7
set user and group of user dir in pillar
8 yıl önce
Ion Dulgheru
78914053ae
also load ssh keys from pillar data
9 yıl önce
Leif Ringstad
90021bf848
Use the primary group for the user when creating authorized_keys
If a primary group is set on the user, and a authorized_keys is provied in ssh_auth_file, the formula fails. This solves that by using the user_group set earlier in the formula
9 yıl önce
root
3760fea1f5
Mitigate Salt issue #29004, fixes "expire" on *BSD
Unreasonable values for 'expire' (after 9999-12-31
on Linux, before 1975-01-01 on *BSD) get divided
by 86400 (number of seconds in a day) when too big
or multiplied by 86400 when too small.
Tested on CentOS 6 (Salt 2015.5.5) and FreeBSD 10.2
(Salt 2015.8.0) with following values:
- 24854 (2038-01-18 in days since epoch)
- 157766400 (1975-01-01 00:00:00 UTC in seconds since epoch)
- 3313526400 (2075-01-01 00:00:00 UTC in seconds since epoch)
- 16000 (2013-10-22 in days since epoch)
- 18000 (2019-04-14 in days since epoch)
(Sponsored by av.tu-berlin.de and fokus.fraunhofer.de)
9 yıl önce
outime
965372d0d2
Changed 'empty_password' key retrieval method
9 yıl önce
outime
441d3cb635
Fixed typo and 'empty_password' key check
9 yıl önce
outime
851a59e952
Adds 'empty_password' statement for states.user.present
9 yıl önce
Serg Kand
819d73a596
changing visudo checking to avoid wrong reporting when launched with test=true
9 yıl önce
Heinz Wiesinger
221f1ccef4
Fix minor bug for ssh known_hosts management with salt >= 2015.5.5.
This version complains that "argument port can not be used in
conjunction with argument hash_hostname", so add hash_hostname
to the fields we handle in the formula so we can override it
if needed.
9 yıl önce
maschinetheist
f087f165f3
Added ability to specify room number, home phone, and work phone as per https://docs.saltstack.com/en/develop/ref/states/all/salt.states.user.html
9 yıl önce
Heinz Wiesinger
452b8ee8cf
Add possibility to manage the user's global git configuration.
9 yıl önce
Heinz Wiesinger
74d5f6cc3c
Add possibility to manage ssh's known_hosts file.
9 yıl önce
Shane Poage
b986e1e7f2
Skips user if it's enabled without a specified source, and their directory does not exist.
9 yıl önce
Shane Poage
cdb862e968
Added feature to allow syncing arbitrary sets of files per user.
9 yıl önce
Shane Poage
a0d7d9fa6e
Fixed indentation in key contents for authorized_keys
9 yıl önce
Shane Poage
ff189c1613
Added ability to provide pillar path for ssh_auth.
9 yıl önce
Florian Ermisch
99a1a66010
break some of those horribly long lines
sry, could not resist.
9 yıl önce
Florian Ermisch
17cc04c041
iteritems() -> items() for python3
9 yıl önce
Simon Lloyd
60e94564d1
Don't add sudo group by default.
This formula doesn't really require the sudo group (unless
there are actually users in that group). Moreover, on FreeBSD
the 'admin' group would be wheel and not sudo.
9 yıl önce
Thibault Cohen
3df9d8ae21
Add missing ssh_config test to create .ssh folder
9 yıl önce
puneet kandhari
ba11c68c24
Revert "@XenophonF made me do it"
This reverts commit a0392693e3
.
9 yıl önce
puneet kandhari
a0392693e3
@XenophonF made me do it
9 yıl önce
Matthew X. Economou
c201269d1d
Do not escape value of `enforce_password`
Fixes #82 .
9 yıl önce
Seth Miller
7dca1ebfd2
Adding support for the enforce_password option.
This will allow users change their passwords after the initial setting in Salt.
9 yıl önce
Cole Kowalski
7dda5571db
the user's .ssh directory should be created if ssh_auth_file is supplied
9 yıl önce
Matthew X. Economou
2f4c088e5d
Rework ssh_keys_pillar-related states
SSH key pairs deployed via the user's ssh_keys_pillar dict aren't
handled the same as the user's ssh_keys, e.g., file ownership and
permissions aren't specified, and the keying material gets copied
directly into the SLS file. This change rewrites the two templated
file.managed states to behave as follows:
- set the files' owner to be the user
- set the files' group to be the user's primary group
- for the public key, set the mode to 644 (u=rw,go=r)
- for the private key, set the mode to 600 (u=rw,g=)
- pull the files' contents directly from pillar
9 yıl önce
René Jochum
a1d6591447
Fix users/init.sls.
Signed-off-by: René Jochum <rene@jochums.at>
9 yıl önce
René Jochum
00cc889683
Fix some smaller bugs.
Signed-off-by: René Jochum <rene@jochums.at>
9 yıl önce
Bohdan Kmit
a467d2a80f
fix permission of GA config file
9 yıl önce
Sander Klein
3a8d72b947
Add "Do Not Edit" part
9 yıl önce
Sander Klein
57c82f3324
Add ~/.ssh/config management
This adds the ability to manage the ~/.ssh/config file for users.
9 yıl önce
Florian Bittner
701326e23f
Add prefix 'users_' to all first level keys to prevent duplicate ids (e.g. in combination with zabbix-formula and key zabbis_user).
9 yıl önce
Alex Ciobica
031d6ce81f
Add pulling keys from other pillar.
Example pillar:
ssh_keys:
id_rsa:
privkey: |
-----BEGIN RSA PRIVATE KEY-----
MIIEowIBAAKCAQEAoQiwO3JhBquPAalQF9qP1lLZNXVjYMIswrMe2HcWUVBgh+vY
U7sCwx/dH6+VvNwmCoqmNnP+8gTPKGl1vgAObJAnMT623dMXjVKwnEagZPRJIxDy
B/HaAre9euNiY3LvIzBTWRSeMfT+rWvIKVBpvwlgGrfgz70m0pqxu+UyFbAGLin+
GpxzZAMaFpZw4sSbIlRuissXZj/sHpQb8p9M5IeO4Z3rjkCP1cxI
-----END RSA PRIVATE KEY-----
pubkey: |
ssh-rsa MIIEowIBAAKCAQEAoQiwO3JhBquPAalQF9qP1lLZNXVjYMIswrMe2H....
9 yıl önce
tiger-seo
1546e2d186
possibility to define user-specific Defaults
9 yıl önce
Andrew Vant
1f80412da8
Added option to source ssh public keys from files.
9 yıl önce