Puppet Class: useradd

Defined in:
manifests/init.pp

Overview

Manage settings regarding users and user creation

author: SIMP Team <simp@simp-project.com>

Parameters:

  • manage_useradd (Boolean) (defaults to: true) —

    If true, manage ‘/etc/default/useradd`

  • manage_login_defs (Boolean) (defaults to: true) —

    If true, manage ‘/etc/login.defs`

  • manage_libuser_conf (Boolean) (defaults to: true) —

    If true, manage ‘/etc/libuser.conf`

  • manage_etc_profile (Boolean) (defaults to: true) —

    If true, manage ‘/etc/profile/simp.*`

  • manage_sysconfig_init (Boolean) (defaults to: true) —

    If true, manage ‘/etc/sysconfig/init`

  • manage_nss (Boolean) (defaults to: true) —

    If true, manage ‘/etc/default/nss`

  • manage_passwd_perms (Boolean) (defaults to: true) —

    If true, manage the permissions of shadow and passwd related files

  • securetty (Variant[Boolean,Array[String]]) (defaults to: ['tty0', 'tty1', 'tty2', 'tty3', 'tty4']) —

    List of ttys available to log into Defaults to [‘tty0’, ‘tty1’, ‘tty2’, ‘tty3’, ‘tty4’]

    • If set to false, management of /etc/securetty will be disabled

    • If the Array is empty(default) or set to true, root will not be able to log into any physical console. This does not prevent root login from anywhere else.

    • If the string ‘ANY_SHELL’ is found in the Array, then the “/etc/securetty“ file will be removed and root will be able to login from anywhere.

  • shells_default (Array[Stdlib::AbsolutePath]) (defaults to: [ '/bin/sh','/bin/bash','/sbin/nologin','/usr/bin/sh','/usr/bin/bash','/usr/sbin/nologin' ]) —

    List of shells that will appear on the system by default

    • These have been set to the usual suspects and users should use the “shells“ parameter to add to the list

  • shells (Variant[Boolean,Array[Stdlib::AbsolutePath]]) (defaults to: []) —

    List of shells available to the user to set as default

    • Set to false to disable management

    • Will be combined with “shells_default“ in /etc/shells



50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
 
# File 'manifests/init.pp', line 50

class useradd (
  Boolean                                      $manage_etc_profile    = true,
  Boolean                                      $manage_libuser_conf   = true,
  Boolean                                      $manage_login_defs     = true,
  Boolean                                      $manage_nss            = true,
  Boolean                                      $manage_passwd_perms   = true,
  Boolean                                      $manage_sysconfig_init = true,
  Boolean                                      $manage_useradd        = true,
  Variant[Boolean,Array[String]]               $securetty             = ['tty0', 'tty1', 'tty2', 'tty3', 'tty4'],

  Array[Stdlib::AbsolutePath]                  $shells_default        = [ '/bin/sh','/bin/bash','/sbin/nologin','/usr/bin/sh','/usr/bin/bash','/usr/sbin/nologin' ],
  Variant[Boolean,Array[Stdlib::AbsolutePath]] $shells                = []
) {

  if $manage_etc_profile    { include '::useradd::etc_profile' }
  if $manage_libuser_conf   { include '::useradd::libuser_conf' }
  if $manage_login_defs     { include '::useradd::login_defs' }
  if $manage_nss            { include '::useradd::nss' }
  if $manage_passwd_perms   { include '::useradd::passwd' }
  if $manage_sysconfig_init { include '::useradd::sysconfig_init' }
  if $manage_useradd        { include '::useradd::useradd' }

  if $securetty {
    if 'ANY_SHELL' in $securetty {

      file { '/etc/securetty':
        ensure  => 'absent',
      }
    }

    else {

      if $securetty == true {
        $_securetty = []
      }
      else {
        $_securetty = $securetty
      }

      file { '/etc/securetty':
        ensure  => 'file',
        owner   => 'root',
        group   => 'root',
        mode    => '0400',
        content => join($_securetty,"\n")
      }
    }
  }
  if $shells and !(empty($shells_default) and empty($shells)) {
    file { '/etc/shells':
      owner   => 'root',
      group   => 'root',
      mode    => '0644',
      content => join(($shells_default + $shells),"\n")
    }
  }
}