Ansible Role: Users

Manage Users, Passwords, and SSH Public Keys

:warning: IMPORTANT NOTICE

This project is for internal use. We do not accept Pull Requests or new issues.

Overview

This role copies SSH keys and sets up sudo to allow users to connect to remote hosts without a password. It also removes SSH keys from the "insecure_keys" directory. The role can adjust PAM to notify about failed SSH logins and can optionally send Slack notifications.

Disclaimer

This role is made for SoInteractive's internal use. However, with some adjustments, it can be used on other systems.

The role keeps public SSH keys for SoInteractive users. This method is considered safe as long as private keys are stored securely.

Example Usage

You can use it in a playbook like this:

- hosts: all
  become: true
  roles:
    - SoInteractive.users

Check the defaults/main.yml for customizable role variables.