users

Users #####

.. image:: https://travis-ci.org/adarnimrod/users.svg?branch=master :target: https://travis-ci.org/adarnimrod/users

An Ansible role to create users, groups, email aliases, configure sudo and lock down root account SSH access. The intended use case is to replace setting up an LDAP or NIS server. The role also installs sudo and creates a sudoers group that can use sudo with a password. A password is also set if provided. For generating the password hash needed, under Debian run: :code:echo MyPassword | mkpasswd -m sha-512 -s and under OpenBSD run: :code:echo MyPassword | encrypt. If provided, email alias and SSH authorized keys are set. If :code:users_lock_root_ssh is set to :code:True (by default it is) then SSH root login is disabled. Another use case is to manage system users, for example to disable the local root login add root to the :code:users variable with the password :code:*************, setting an email address will also set mail forwarding.

Requirements

See :code:meta/main.yml and assertions at the top of :code:tasks/main.yml.

Role Variables

See :code:defaults/main.yml.

Dependencies

See :code:meta/main.yml.

Example Playbook

See :code:tests/playbook.yml.

Testing

Testing requires Python 2.7, Tox, Vagrant and Virtualbox. To test simply run :code:tox. Pre-commit <http://pre-commit.com/>_ is also setup for this project.

License

This software is licensed under the MIT license (see the :code:LICENSE.txt file).

Author Information

Nimrod Adar, contact me <[email protected]>_ or visit my website <https://www.shore.co.il/>. Patches are welcome via git send-email <http://git-scm.com/book/en/v2/Git-Commands-Email>. The repository is located at: https://git.shore.co.il/explore/.