114953cbff
According to the Ubuntu 12.04 release notes, up until Ubuntu 11.10 admin access was granted via the "admin" unix group, but was changed to the "sudo" group to be more consistent with Debian et al. Remove the now unnecessary group Modify the install-ansible role to set some directory ownership to root:root; there didn't seem to be any reason to use admin here. This means the "users" role is no longer required in the bridge.yaml, as it is run from the base playbook anyway. Change-Id: I6a7fdd460fb472f0d3468eb080aebbb010931e11
67 lines
1.5 KiB
YAML
67 lines
1.5 KiB
YAML
- name: Add sudo group
|
|
group:
|
|
name: "sudo"
|
|
state: present
|
|
|
|
# NOTE(mordred): We replace the main file rather than dropping a file in to
|
|
# /etc/sudoers.d to deal with divergent base sudoers files from our distros.
|
|
# We also want to change some default behavior (we want nopassword sudo, for
|
|
# instance).
|
|
- name: Setup sudoers file
|
|
copy:
|
|
dest: /etc/sudoers
|
|
src: sudoers
|
|
owner: root
|
|
group: root
|
|
mode: 0440
|
|
|
|
- name: Setup login.defs file
|
|
copy:
|
|
dest: /etc/login.defs
|
|
src: '{{ ansible_facts.os_family }}/login.defs'
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
|
|
- name: Delete old users
|
|
loop: "{{ disabled_users }}"
|
|
user:
|
|
name: "{{ item }}"
|
|
state: absent
|
|
remove: yes
|
|
|
|
- name: Add groups
|
|
loop: "{{ base_users + extra_users }}"
|
|
group:
|
|
name: "{{ item }}"
|
|
state: present
|
|
gid: "{{ all_users[item].gid|default(omit) }}"
|
|
when:
|
|
- item in all_users
|
|
- "'gid' in all_users[item]"
|
|
|
|
- name: Add users
|
|
loop: "{{ base_users + extra_users }}"
|
|
user:
|
|
name: "{{ item }}"
|
|
state: present
|
|
uid: "{{ all_users[item].uid }}"
|
|
group: "{{ item }}"
|
|
comment: "{{ all_users[item].comment }}"
|
|
groups: sudo
|
|
shell: /bin/bash
|
|
when:
|
|
- item in all_users
|
|
- "'uid' in all_users[item]"
|
|
|
|
- name: Add ssh keys to users
|
|
loop: "{{ base_users + extra_users }}"
|
|
authorized_key:
|
|
user: "{{ item }}"
|
|
state: present
|
|
key: "{{ all_users[item].key }}"
|
|
exclusive: yes
|
|
when:
|
|
- item in all_users
|
|
- "'key' in all_users[item]"
|