Roman
2763338abe
Update user_files.sls
Fix for:
Rendering SLS 'base:users.user_files' failed: Jinja variable 'dict object' has no attribute 'home'
il y a 9 ans
outime
965372d0d2
Changed 'empty_password' key retrieval method
il y a 9 ans
outime
441d3cb635
Fixed typo and 'empty_password' key check
il y a 9 ans
outime
851a59e952
Adds 'empty_password' statement for states.user.present
il y a 9 ans
Serg Kand
819d73a596
changing visudo checking to avoid wrong reporting when launched with test=true
il y a 9 ans
Heinz Wiesinger
221f1ccef4
Fix minor bug for ssh known_hosts management with salt >= 2015.5.5.
This version complains that "argument port can not be used in
conjunction with argument hash_hostname", so add hash_hostname
to the fields we handle in the formula so we can override it
if needed.
il y a 9 ans
maschinetheist
f087f165f3
Added ability to specify room number, home phone, and work phone as per https://docs.saltstack.com/en/develop/ref/states/all/salt.states.user.html
il y a 9 ans
Heinz Wiesinger
452b8ee8cf
Add possibility to manage the user's global git configuration.
il y a 9 ans
Heinz Wiesinger
74d5f6cc3c
Add possibility to manage ssh's known_hosts file.
il y a 9 ans
Shane Poage
b986e1e7f2
Skips user if it's enabled without a specified source, and their directory does not exist.
il y a 9 ans
Shane Poage
cdb862e968
Added feature to allow syncing arbitrary sets of files per user.
il y a 9 ans
Shane Poage
a0d7d9fa6e
Fixed indentation in key contents for authorized_keys
il y a 9 ans
Shane Poage
ff189c1613
Added ability to provide pillar path for ssh_auth.
il y a 9 ans
Florian Ermisch
99a1a66010
break some of those horribly long lines
sry, could not resist.
il y a 9 ans
Florian Ermisch
17cc04c041
iteritems() -> items() for python3
il y a 9 ans
Andres Montalban
750f2e6345
Add support for .profile file
il y a 9 ans
Thibault Cohen
3df9d8ae21
Add missing ssh_config test to create .ssh folder
il y a 9 ans
puneet kandhari
ba11c68c24
Revert "@XenophonF made me do it"
This reverts commit a0392693e3
.
il y a 9 ans
puneet kandhari
a0392693e3
@XenophonF made me do it
il y a 9 ans
Matthew X. Economou
c201269d1d
Do not escape value of `enforce_password`
Fixes #82 .
il y a 9 ans
Seth Miller
7dca1ebfd2
Adding support for the enforce_password option.
This will allow users change their passwords after the initial setting in Salt.
il y a 9 ans
Cole Kowalski
7dda5571db
the user's .ssh directory should be created if ssh_auth_file is supplied
il y a 9 ans
Matthew X. Economou
2f4c088e5d
Rework ssh_keys_pillar-related states
SSH key pairs deployed via the user's ssh_keys_pillar dict aren't
handled the same as the user's ssh_keys, e.g., file ownership and
permissions aren't specified, and the keying material gets copied
directly into the SLS file. This change rewrites the two templated
file.managed states to behave as follows:
- set the files' owner to be the user
- set the files' group to be the user's primary group
- for the public key, set the mode to 644 (u=rw,go=r)
- for the private key, set the mode to 600 (u=rw,g=)
- pull the files' contents directly from pillar
il y a 9 ans
René Jochum
a1d6591447
Fix users/init.sls.
Signed-off-by: René Jochum <rene@jochums.at>
il y a 9 ans
René Jochum
00cc889683
Fix some smaller bugs.
Signed-off-by: René Jochum <rene@jochums.at>
il y a 9 ans
Bohdan Kmit
d0bbbda8aa
readd 2fa pam enforcement
il y a 9 ans
Bohdan Kmit
a467d2a80f
fix permission of GA config file
il y a 9 ans
Niels Abspoel
622b846d7f
Enable/disable bashrc/vimrc per user
Made both states configurable per user in pillar data
Had to drop extend, for this otherwise the extend would be empty if manage is
False
il y a 9 ans
Niels Abspoel
b4acac9de7
Added vimrc extension to users-formula
This will ensure that a given vimrc file in a users home dir is managed
Default it will search for a vimrc in salt://users/files/vimrc/{{ username
}}/vimrc
If this isn't found it will install salt://users/files/vimrc/vimrc
il y a 9 ans
Niels Abspoel
eac091bf66
fix sources to source
il y a 9 ans
Niels Abspoel
29ce431151
Added bashrc extension to users-formula
This will ensure a given bashrc file in a users home dir.
Default it will search for a bashrc in salt://users/files/bashrc/{{ username }}/bashrc
If no file is found it will install the default from
salt://users/files/bashrc/bashrc
il y a 9 ans
Sander Klein
3a8d72b947
Add "Do Not Edit" part
il y a 9 ans
Sander Klein
57c82f3324
Add ~/.ssh/config management
This adds the ability to manage the ~/.ssh/config file for users.
il y a 9 ans
Florian Bittner
701326e23f
Add prefix 'users_' to all first level keys to prevent duplicate ids (e.g. in combination with zabbix-formula and key zabbis_user).
il y a 9 ans
Alex Ciobica
031d6ce81f
Add pulling keys from other pillar.
Example pillar:
ssh_keys:
id_rsa:
privkey: |
-----BEGIN RSA PRIVATE KEY-----
MIIEowIBAAKCAQEAoQiwO3JhBquPAalQF9qP1lLZNXVjYMIswrMe2HcWUVBgh+vY
U7sCwx/dH6+VvNwmCoqmNnP+8gTPKGl1vgAObJAnMT623dMXjVKwnEagZPRJIxDy
B/HaAre9euNiY3LvIzBTWRSeMfT+rWvIKVBpvwlgGrfgz70m0pqxu+UyFbAGLin+
GpxzZAMaFpZw4sSbIlRuissXZj/sHpQb8p9M5IeO4Z3rjkCP1cxI
-----END RSA PRIVATE KEY-----
pubkey: |
ssh-rsa MIIEowIBAAKCAQEAoQiwO3JhBquPAalQF9qP1lLZNXVjYMIswrMe2H....
il y a 9 ans
tiger-seo
1546e2d186
possibility to define user-specific Defaults
il y a 9 ans
Andrew Vant
1f80412da8
Added option to source ssh public keys from files.
il y a 9 ans
root
d416b6d839
Move ssh_auth_file key processing to before ssh_auth key to extend instead of overwrite functionality.
il y a 10 ans
René Jochum
c1b383d78b
Add ability to create system users.
il y a 10 ans
root
fdc2fc2dfc
Add 'ssh_auth_file' pillar key to generate an authorized_keys file from given ssh public keys.
il y a 10 ans
René Jochum
6ca7aa0078
Remove leading whitespaces.
il y a 10 ans
Bohdan Kmit
c3b5b87fb2
google auth example pillar config add; forgotten gauth state file add
il y a 10 ans
Bohdan Kmit
89d6672887
google auth package and config installation
il y a 10 ans
Thomas Juberg
7aa32881b7
Clean up logic check to remove redundant check.
il y a 10 ans
Thomas Juberg
518b06281a
If createhome is set to false, don't touch the home directory or its
permissions.
il y a 10 ans
Thomas Juberg
e35045801c
Add support for setting user expire
il y a 10 ans
Tim Jones
add153e060
Allow '!' prefix in password for locked\disabled accounts.
Signed-off-by: Tim Jones <me@prototim.com>
il y a 10 ans
Scott Reeves
ea76d0d84f
Remove trailing slash from sudoers_dir
il y a 10 ans
Jason Wolfe
9a71d78d2b
Sorry for the spam, simplify this remove_groups rule a bit
il y a 10 ans
Jason Wolfe
a899ee85ec
Make sure the logic stands after the default in salt is changed
il y a 10 ans