outime
965372d0d2
Changed 'empty_password' key retrieval method
9 роки тому
outime
441d3cb635
Fixed typo and 'empty_password' key check
9 роки тому
outime
851a59e952
Adds 'empty_password' statement for states.user.present
9 роки тому
Serg Kand
819d73a596
changing visudo checking to avoid wrong reporting when launched with test=true
9 роки тому
Heinz Wiesinger
221f1ccef4
Fix minor bug for ssh known_hosts management with salt >= 2015.5.5.
This version complains that "argument port can not be used in
conjunction with argument hash_hostname", so add hash_hostname
to the fields we handle in the formula so we can override it
if needed.
9 роки тому
maschinetheist
f087f165f3
Added ability to specify room number, home phone, and work phone as per https://docs.saltstack.com/en/develop/ref/states/all/salt.states.user.html
9 роки тому
Heinz Wiesinger
452b8ee8cf
Add possibility to manage the user's global git configuration.
9 роки тому
Heinz Wiesinger
74d5f6cc3c
Add possibility to manage ssh's known_hosts file.
9 роки тому
Shane Poage
b986e1e7f2
Skips user if it's enabled without a specified source, and their directory does not exist.
9 роки тому
Shane Poage
cdb862e968
Added feature to allow syncing arbitrary sets of files per user.
9 роки тому
Shane Poage
a0d7d9fa6e
Fixed indentation in key contents for authorized_keys
9 роки тому
Shane Poage
ff189c1613
Added ability to provide pillar path for ssh_auth.
9 роки тому
Florian Ermisch
99a1a66010
break some of those horribly long lines
sry, could not resist.
9 роки тому
Florian Ermisch
17cc04c041
iteritems() -> items() for python3
9 роки тому
Andres Montalban
750f2e6345
Add support for .profile file
9 роки тому
Thibault Cohen
3df9d8ae21
Add missing ssh_config test to create .ssh folder
9 роки тому
puneet kandhari
ba11c68c24
Revert "@XenophonF made me do it"
This reverts commit a0392693e3
.
9 роки тому
puneet kandhari
a0392693e3
@XenophonF made me do it
9 роки тому
Matthew X. Economou
c201269d1d
Do not escape value of `enforce_password`
Fixes #82 .
9 роки тому
Seth Miller
7dca1ebfd2
Adding support for the enforce_password option.
This will allow users change their passwords after the initial setting in Salt.
9 роки тому
Cole Kowalski
7dda5571db
the user's .ssh directory should be created if ssh_auth_file is supplied
9 роки тому
Matthew X. Economou
2f4c088e5d
Rework ssh_keys_pillar-related states
SSH key pairs deployed via the user's ssh_keys_pillar dict aren't
handled the same as the user's ssh_keys, e.g., file ownership and
permissions aren't specified, and the keying material gets copied
directly into the SLS file. This change rewrites the two templated
file.managed states to behave as follows:
- set the files' owner to be the user
- set the files' group to be the user's primary group
- for the public key, set the mode to 644 (u=rw,go=r)
- for the private key, set the mode to 600 (u=rw,g=)
- pull the files' contents directly from pillar
9 роки тому
René Jochum
a1d6591447
Fix users/init.sls.
Signed-off-by: René Jochum <rene@jochums.at>
9 роки тому
René Jochum
00cc889683
Fix some smaller bugs.
Signed-off-by: René Jochum <rene@jochums.at>
9 роки тому
Bohdan Kmit
d0bbbda8aa
readd 2fa pam enforcement
9 роки тому
Bohdan Kmit
a467d2a80f
fix permission of GA config file
9 роки тому
Niels Abspoel
622b846d7f
Enable/disable bashrc/vimrc per user
Made both states configurable per user in pillar data
Had to drop extend, for this otherwise the extend would be empty if manage is
False
9 роки тому
Niels Abspoel
b4acac9de7
Added vimrc extension to users-formula
This will ensure that a given vimrc file in a users home dir is managed
Default it will search for a vimrc in salt://users/files/vimrc/{{ username
}}/vimrc
If this isn't found it will install salt://users/files/vimrc/vimrc
9 роки тому
Niels Abspoel
eac091bf66
fix sources to source
9 роки тому
Niels Abspoel
29ce431151
Added bashrc extension to users-formula
This will ensure a given bashrc file in a users home dir.
Default it will search for a bashrc in salt://users/files/bashrc/{{ username }}/bashrc
If no file is found it will install the default from
salt://users/files/bashrc/bashrc
9 роки тому
Sander Klein
3a8d72b947
Add "Do Not Edit" part
9 роки тому
Sander Klein
57c82f3324
Add ~/.ssh/config management
This adds the ability to manage the ~/.ssh/config file for users.
9 роки тому
Florian Bittner
701326e23f
Add prefix 'users_' to all first level keys to prevent duplicate ids (e.g. in combination with zabbix-formula and key zabbis_user).
9 роки тому
Alex Ciobica
031d6ce81f
Add pulling keys from other pillar.
Example pillar:
ssh_keys:
id_rsa:
privkey: |
-----BEGIN RSA PRIVATE KEY-----
MIIEowIBAAKCAQEAoQiwO3JhBquPAalQF9qP1lLZNXVjYMIswrMe2HcWUVBgh+vY
U7sCwx/dH6+VvNwmCoqmNnP+8gTPKGl1vgAObJAnMT623dMXjVKwnEagZPRJIxDy
B/HaAre9euNiY3LvIzBTWRSeMfT+rWvIKVBpvwlgGrfgz70m0pqxu+UyFbAGLin+
GpxzZAMaFpZw4sSbIlRuissXZj/sHpQb8p9M5IeO4Z3rjkCP1cxI
-----END RSA PRIVATE KEY-----
pubkey: |
ssh-rsa MIIEowIBAAKCAQEAoQiwO3JhBquPAalQF9qP1lLZNXVjYMIswrMe2H....
9 роки тому
tiger-seo
1546e2d186
possibility to define user-specific Defaults
9 роки тому
Andrew Vant
1f80412da8
Added option to source ssh public keys from files.
9 роки тому
root
d416b6d839
Move ssh_auth_file key processing to before ssh_auth key to extend instead of overwrite functionality.
9 роки тому
René Jochum
c1b383d78b
Add ability to create system users.
9 роки тому
root
fdc2fc2dfc
Add 'ssh_auth_file' pillar key to generate an authorized_keys file from given ssh public keys.
10 роки тому
René Jochum
6ca7aa0078
Remove leading whitespaces.
10 роки тому
Bohdan Kmit
c3b5b87fb2
google auth example pillar config add; forgotten gauth state file add
10 роки тому
Bohdan Kmit
89d6672887
google auth package and config installation
10 роки тому
Thomas Juberg
7aa32881b7
Clean up logic check to remove redundant check.
10 роки тому
Thomas Juberg
518b06281a
If createhome is set to false, don't touch the home directory or its
permissions.
10 роки тому
Thomas Juberg
e35045801c
Add support for setting user expire
10 роки тому
Tim Jones
add153e060
Allow '!' prefix in password for locked\disabled accounts.
Signed-off-by: Tim Jones <me@prototim.com>
10 роки тому
Scott Reeves
ea76d0d84f
Remove trailing slash from sudoers_dir
10 роки тому
Jason Wolfe
9a71d78d2b
Sorry for the spam, simplify this remove_groups rule a bit
10 роки тому
Jason Wolfe
a899ee85ec
Make sure the logic stands after the default in salt is changed
10 роки тому
Jason Wolfe
2a464d3dc3
By default, Salt will remove any groups not listed, so a users groups matches exactly the list you pass. This was added here:
https://github.com/saltstack/salt/issues/2142
This has been causing issues for many people, as the remove_groups options is undocumented. In the 2014.7 release this is changing, and remove_groups will default to false:
https://github.com/saltstack/salt/issues/13276
I'm going with false by default, as it's our use case and it will soon be the default. If people believe this module should default to true and remove groups not listed, I think that's open for discussion, but we should at least add the option.
10 роки тому