opstree_devops.usermanagement

Ansible Role: User and Group Management

An ansible role to manage users and groups on a system.

Description

Configure users, group, SSH keys and administrative sudo access. The role can:

Add groups
Add and Remove users
Install SSH keys for users
Configure sudo to allow root access for the administration group

Version History

Date	Version	Description	Changed By
June '15	v.1.0	Initial Draft	Sudipt Sharma

Supported OS

This role will work on the following operating systems:

   * Centos 6/7
   * Debian 14/16
   * Redhat 6/7
   * Amazon AMI

Directory Structure

osm_usermanagement/
├── meta
│   └── main.yml
├── pub_keys
├── README.md
├── tasks
│   ├── add_users_groups.yml
│   └── main.yml
├── templates
│   └── sudoersfile
└── userlist

Role Variables

Variables	Default Values	Description
user_mapping_file_path	userlist	meta file for user and group details
pub_keys_dir_path	pub_keys	Public key of all user

There should be a meta file for user and group details in directory structure for ex; userlist is a meta file where details should go in following format :

user1,group1,present

There should be public key of all users in directory structure and it should be defined under pub_keys.Public key name would be on the name of the user.Different name would not work here.

For Ex; pub_keys/user1

Playbook Execution

This role requires root access, so either run it in a playbook with a global become: yes, or invoke the role in your playbook like:

- hosts: usermanagement
  roles:
    - role: osm_usermanagement
      user_mapping_file_path: '{{ playbook_dir }}/userlist'
      pub_keys_dir_path: '{{ playbook_dir }}/pub_keys'

Execute the playbook individually using the below command with required extra variables ( for ex; playbook name: users.yml):

ansible-playbook users.yml -e "HOST=host-name"