Matthew X. Economou
2f4c088e5d
Rework ssh_keys_pillar-related states
SSH key pairs deployed via the user's ssh_keys_pillar dict aren't
handled the same as the user's ssh_keys, e.g., file ownership and
permissions aren't specified, and the keying material gets copied
directly into the SLS file. This change rewrites the two templated
file.managed states to behave as follows:
- set the files' owner to be the user
- set the files' group to be the user's primary group
- for the public key, set the mode to 644 (u=rw,go=r)
- for the private key, set the mode to 600 (u=rw,g=)
- pull the files' contents directly from pillar
пре 9 година
puneet kandhari
001e913e77
Merge pull request #76 from pcdummy/master
Some smaller changes.
пре 9 година
René Jochum
a1d6591447
Fix users/init.sls.
Signed-off-by: René Jochum <rene@jochums.at>
пре 9 година
René Jochum
2c4ed3edc9
Merge branch 'master' of github.com:pcdummy/saltstack-users-formula
Signed-off-by: René Jochum <rene@jochums.at>
Conflicts:
pillar.example
users/init.sls
пре 9 година
René Jochum
00cc889683
Fix some smaller bugs.
Signed-off-by: René Jochum <rene@jochums.at>
пре 9 година
puneet kandhari
827fb76304
Merge pull request #75 from amontalban/master
Add sudo_rules syntax examples for rules with colons
пре 9 година
Andres Montalban
e0acdc9b30
Add sudo_rules syntax examples for rules with colons
пре 9 година
Forrest
b8f390e087
Merge pull request #73 from maytechnet/master
fix permission of GA config file
пре 9 година
Bohdan Kmit
d0bbbda8aa
readd 2fa pam enforcement
пре 9 година
Bohdan Kmit
a467d2a80f
fix permission of GA config file
пре 9 година
Nitin Madhok
b64401c6b2
Merge pull request #71 from aboe76/improve_bashrc_vimrc
Enable/disable bashrc/vimrc per user
пре 9 година
Niels Abspoel
622b846d7f
Enable/disable bashrc/vimrc per user
Made both states configurable per user in pillar data
Had to drop extend, for this otherwise the extend would be empty if manage is
False
пре 9 година
Nitin Madhok
7a7acd3c8e
Merge pull request #70 from aboe76/add_vimrc
Add vimrc extension
пре 9 година
Niels Abspoel
35b9679b1f
Updated the Readme
пре 9 година
Niels Abspoel
b4acac9de7
Added vimrc extension to users-formula
This will ensure that a given vimrc file in a users home dir is managed
Default it will search for a vimrc in salt://users/files/vimrc/{{ username
}}/vimrc
If this isn't found it will install salt://users/files/vimrc/vimrc
пре 9 година
Nitin Madhok
605711f1a4
Merge pull request #69 from aboe76/add_bashrc
Added bashrc extension to users-formula
пре 9 година
Niels Abspoel
eac091bf66
fix sources to source
пре 9 година
Niels Abspoel
29ce431151
Added bashrc extension to users-formula
This will ensure a given bashrc file in a users home dir.
Default it will search for a bashrc in salt://users/files/bashrc/{{ username }}/bashrc
If no file is found it will install the default from
salt://users/files/bashrc/bashrc
пре 9 година
Brian Jackson
69a4d981f3
Merge pull request #68 from roedie/add-ssh-config-management
Add ~/.ssh/config management
пре 9 година
Sander Klein
3a8d72b947
Add "Do Not Edit" part
пре 9 година
Sander Klein
57c82f3324
Add ~/.ssh/config management
This adds the ability to manage the ~/.ssh/config file for users.
пре 9 година
Nitin Madhok
3fc2a2bac9
Removing extra new line characters
пре 9 година
Forrest
9b11ec775b
Merge pull request #67 from daschatten/master
Add prefix 'users_' to all first level keys to prevent duplicate ids …
пре 9 година
Florian Bittner
701326e23f
Add prefix 'users_' to all first level keys to prevent duplicate ids (e.g. in combination with zabbix-formula and key zabbis_user).
пре 9 година
Forrest
4e70e924f4
Merge pull request #66 from c10b10/master
Add the ability to pull ssh keys from a different pillar
пре 9 година
Alex Ciobica
031d6ce81f
Add pulling keys from other pillar.
Example pillar:
ssh_keys:
id_rsa:
privkey: |
-----BEGIN RSA PRIVATE KEY-----
MIIEowIBAAKCAQEAoQiwO3JhBquPAalQF9qP1lLZNXVjYMIswrMe2HcWUVBgh+vY
U7sCwx/dH6+VvNwmCoqmNnP+8gTPKGl1vgAObJAnMT623dMXjVKwnEagZPRJIxDy
B/HaAre9euNiY3LvIzBTWRSeMfT+rWvIKVBpvwlgGrfgz70m0pqxu+UyFbAGLin+
GpxzZAMaFpZw4sSbIlRuissXZj/sHpQb8p9M5IeO4Z3rjkCP1cxI
-----END RSA PRIVATE KEY-----
pubkey: |
ssh-rsa MIIEowIBAAKCAQEAoQiwO3JhBquPAalQF9qP1lLZNXVjYMIswrMe2H....
пре 9 година
Brian Jackson
fffad7d07a
Merge pull request #65 from tiger-seo/master
fixing example for sudo defaults for specific user
пре 9 година
tiger-seo
0aab4b5516
fixing example for sudo defaults for specific user
пре 9 година
Nitin Madhok
a41e092d62
Merge pull request #64 from tiger-seo/master
possibility to define Defaults specific to user
пре 9 година
tiger-seo
1546e2d186
possibility to define user-specific Defaults
пре 9 година
Forrest
d11e7046ec
Merge pull request #63 from andrew-vant/auth_from_files
Added option to source ssh public keys from files.
пре 9 година
Andrew Vant
1f80412da8
Added option to source ssh public keys from files.
пре 9 година
Nitin Madhok
f083cac657
Update LICENSING year
пре 9 година
Florian Bittner
d827b4fb86
Merge pull request #61 from daschatten/master
Add 'ssh_auth_file' pillar key to generate an authorized_keys file from ...
пре 9 година
root
d416b6d839
Move ssh_auth_file key processing to before ssh_auth key to extend instead of overwrite functionality.
пре 9 година
René Jochum
c1b383d78b
Add ability to create system users.
пре 9 година
root
fdc2fc2dfc
Add 'ssh_auth_file' pillar key to generate an authorized_keys file from given ssh public keys.
пре 9 година
René Jochum
1e3f6c9865
Fix pillar.example->sudo_rules.
пре 9 година
René Jochum
6ca7aa0078
Remove leading whitespaces.
пре 9 година
Forrest
e39a9537ba
Merge pull request #60 from maytechnet/feature/googleauth
google authentication pam module support
пре 9 година
Bohdan Kmit
c3b5b87fb2
google auth example pillar config add; forgotten gauth state file add
пре 9 година
Bohdan Kmit
89d6672887
google auth package and config installation
пре 9 година
Nitin Madhok
a57f81a378
Merge pull request #59 from FEI-Lithicon/master
Add support for 'expire' and stop managing home directory if createhome is set to False
пре 10 година
Thomas Juberg
7aa32881b7
Clean up logic check to remove redundant check.
пре 10 година
Thomas Juberg
518b06281a
If createhome is set to false, don't touch the home directory or its
permissions.
пре 10 година
Thomas Juberg
e35045801c
Add support for setting user expire
пре 10 година
Nitin Madhok
c237912af0
Merge pull request #58 from TimJones/master
Allow '!' prefix in password for disabled\locked accounts.
пре 10 година
Tim Jones
add153e060
Allow '!' prefix in password for locked\disabled accounts.
Signed-off-by: Tim Jones <me@prototim.com>
пре 10 година
Tim Jones
26c4578f99
Merge pull request #1 from saltstack-formulas/master
Update from upstream
пре 10 година
Forrest
8e9dae0e55
Merge pull request #56 from Cottser/sudoers-dir-trailing-slash
Remove trailing slash from sudoers_dir
пре 10 година