Commit Graph

343 Commits

Author SHA1 Message Date
puneet kandhari
0e72cc20b9 Merge pull request #77 from irtnog/add-managed-file-permissions-to-ssh_keys_pillar-states
Rework ssh_keys_pillar-related states
2015-07-25 15:32:33 -05:00
puneet kandhari
5e91782cbe Merge pull request #79 from iamseth/master
Adding support for the enforce_password option.
2015-07-17 09:47:01 -07:00
Seth Miller
7dca1ebfd2 Adding support for the enforce_password option.
This will allow users change their passwords after the initial setting in Salt.
2015-07-17 10:18:38 -05:00
puneet kandhari
a7d348fb1f Merge pull request #78 from colekowalski/ssh-auth-file
the user's .ssh directory should be created if ssh_auth_file is supplied
2015-07-16 13:32:33 -07:00
Cole Kowalski
7dda5571db the user's .ssh directory should be created if ssh_auth_file is supplied 2015-07-16 15:23:43 -04:00
Matthew X. Economou
2f4c088e5d Rework ssh_keys_pillar-related states
SSH key pairs deployed via the user's ssh_keys_pillar dict aren't
handled the same as the user's ssh_keys, e.g., file ownership and
permissions aren't specified, and the keying material gets copied
directly into the SLS file.  This change rewrites the two templated
file.managed states to behave as follows:

  - set the files' owner to be the user

  - set the files' group to be the user's primary group

  - for the public key, set the mode to 644 (u=rw,go=r)

  - for the private key, set the mode to 600 (u=rw,g=)

  - pull the files' contents directly from pillar
2015-07-13 15:22:45 -04:00
puneet kandhari
001e913e77 Merge pull request #76 from pcdummy/master
Some smaller changes.
2015-07-13 07:24:35 -05:00
René Jochum
a1d6591447 Fix users/init.sls.
Signed-off-by: René Jochum <rene@jochums.at>
2015-07-13 13:51:02 +02:00
René Jochum
2c4ed3edc9 Merge branch 'master' of github.com:pcdummy/saltstack-users-formula
Signed-off-by: René Jochum <rene@jochums.at>

Conflicts:
	pillar.example
	users/init.sls
2015-07-13 13:27:27 +02:00
René Jochum
00cc889683 Fix some smaller bugs.
Signed-off-by: René Jochum <rene@jochums.at>
2015-07-11 10:35:15 +02:00
puneet kandhari
827fb76304 Merge pull request #75 from amontalban/master
Add sudo_rules syntax examples for rules with colons
2015-07-04 07:56:41 -05:00
Andres Montalban
e0acdc9b30 Add sudo_rules syntax examples for rules with colons 2015-07-04 09:30:50 -03:00
Forrest
b8f390e087 Merge pull request #73 from maytechnet/master
fix permission of GA config file
2015-07-01 10:34:19 -07:00
Bohdan Kmit
d0bbbda8aa readd 2fa pam enforcement 2015-07-01 19:15:31 +03:00
Bohdan Kmit
a467d2a80f fix permission of GA config file 2015-07-01 18:39:53 +03:00
Nitin Madhok
b64401c6b2 Merge pull request #71 from aboe76/improve_bashrc_vimrc
Enable/disable bashrc/vimrc per user
2015-06-11 17:41:28 -04:00
Niels Abspoel
622b846d7f Enable/disable bashrc/vimrc per user
Made both states configurable per user in pillar data
Had to drop extend, for this otherwise the extend would be empty if manage is
False
2015-06-11 23:34:16 +02:00
Nitin Madhok
7a7acd3c8e Merge pull request #70 from aboe76/add_vimrc
Add vimrc extension
2015-06-10 17:06:02 -04:00
Niels Abspoel
35b9679b1f Updated the Readme 2015-06-10 23:00:58 +02:00
Niels Abspoel
b4acac9de7 Added vimrc extension to users-formula
This will ensure that a given vimrc file in a users home dir is managed
Default it will search for a vimrc in salt://users/files/vimrc/{{ username
}}/vimrc
If this isn't found it will install salt://users/files/vimrc/vimrc
2015-06-10 22:56:57 +02:00
Nitin Madhok
605711f1a4 Merge pull request #69 from aboe76/add_bashrc
Added bashrc extension to users-formula
2015-06-10 16:39:54 -04:00
Niels Abspoel
eac091bf66 fix sources to source 2015-06-10 22:03:26 +02:00
Niels Abspoel
29ce431151 Added bashrc extension to users-formula
This will ensure a given bashrc file in a users home dir.
Default it will search for a bashrc in salt://users/files/bashrc/{{ username }}/bashrc
If no file is found it will install the default from
salt://users/files/bashrc/bashrc
2015-06-10 21:40:52 +02:00
Brian Jackson
69a4d981f3 Merge pull request #68 from roedie/add-ssh-config-management
Add ~/.ssh/config management
2015-05-19 12:31:30 -05:00
Sander Klein
3a8d72b947 Add "Do Not Edit" part 2015-05-16 09:56:20 +02:00
Sander Klein
57c82f3324 Add ~/.ssh/config management
This adds the ability to manage the ~/.ssh/config file for users.
2015-05-15 21:47:40 +02:00
Nitin Madhok
3fc2a2bac9 Removing extra new line characters 2015-05-07 13:39:04 -04:00
Forrest
9b11ec775b Merge pull request #67 from daschatten/master
Add prefix 'users_' to all first level keys to prevent duplicate ids …
2015-05-06 15:39:50 -07:00
Florian Bittner
701326e23f Add prefix 'users_' to all first level keys to prevent duplicate ids (e.g. in combination with zabbix-formula and key zabbis_user). 2015-05-07 00:07:06 +02:00
Forrest
4e70e924f4 Merge pull request #66 from c10b10/master
Add the ability to pull ssh keys from a different pillar
2015-05-01 11:12:28 -07:00
Alex Ciobica
031d6ce81f Add pulling keys from other pillar.
Example pillar:

ssh_keys:
  id_rsa:
    privkey: |
      -----BEGIN RSA PRIVATE KEY-----
      MIIEowIBAAKCAQEAoQiwO3JhBquPAalQF9qP1lLZNXVjYMIswrMe2HcWUVBgh+vY
      U7sCwx/dH6+VvNwmCoqmNnP+8gTPKGl1vgAObJAnMT623dMXjVKwnEagZPRJIxDy
      B/HaAre9euNiY3LvIzBTWRSeMfT+rWvIKVBpvwlgGrfgz70m0pqxu+UyFbAGLin+
      GpxzZAMaFpZw4sSbIlRuissXZj/sHpQb8p9M5IeO4Z3rjkCP1cxI
      -----END RSA PRIVATE KEY-----
    pubkey: |
      ssh-rsa MIIEowIBAAKCAQEAoQiwO3JhBquPAalQF9qP1lLZNXVjYMIswrMe2H....
2015-05-01 18:48:28 +03:00
Brian Jackson
fffad7d07a Merge pull request #65 from tiger-seo/master
fixing example for sudo defaults for specific user
2015-04-11 12:00:34 -05:00
tiger-seo
0aab4b5516 fixing example for sudo defaults for specific user 2015-04-11 15:14:36 +03:00
Nitin Madhok
a41e092d62 Merge pull request #64 from tiger-seo/master
possibility to define Defaults specific to user
2015-04-10 18:06:16 -04:00
tiger-seo
1546e2d186 possibility to define user-specific Defaults 2015-04-06 22:34:59 +03:00
Forrest
d11e7046ec Merge pull request #63 from andrew-vant/auth_from_files
Added option to source ssh public keys from files.
2015-04-02 10:57:08 -07:00
Andrew Vant
1f80412da8 Added option to source ssh public keys from files. 2015-04-02 13:01:30 -04:00
Nitin Madhok
f083cac657 Update LICENSING year 2015-03-20 20:12:18 -04:00
Florian Bittner
d827b4fb86 Merge pull request #61 from daschatten/master
Add 'ssh_auth_file' pillar key to generate an authorized_keys file from ...
2015-03-13 13:38:00 +01:00
root
d416b6d839 Move ssh_auth_file key processing to before ssh_auth key to extend instead of overwrite functionality. 2015-03-13 13:32:39 +01:00
René Jochum
c1b383d78b Add ability to create system users. 2015-03-12 23:27:31 +01:00
root
fdc2fc2dfc Add 'ssh_auth_file' pillar key to generate an authorized_keys file from given ssh public keys. 2015-02-12 23:09:56 +01:00
René Jochum
1e3f6c9865 Fix pillar.example->sudo_rules. 2015-01-24 03:31:01 +01:00
René Jochum
6ca7aa0078 Remove leading whitespaces. 2015-01-23 20:52:14 +01:00
Forrest
e39a9537ba Merge pull request #60 from maytechnet/feature/googleauth
google authentication pam module support
2015-01-15 09:00:18 -08:00
Bohdan Kmit
c3b5b87fb2 google auth example pillar config add; forgotten gauth state file add 2015-01-15 13:28:51 +00:00
Bohdan Kmit
89d6672887 google auth package and config installation 2015-01-14 17:25:17 +00:00
Nitin Madhok
a57f81a378 Merge pull request #59 from FEI-Lithicon/master
Add support for 'expire' and stop managing home directory if createhome is set to False
2014-12-31 15:11:59 +05:30
Thomas Juberg
7aa32881b7 Clean up logic check to remove redundant check. 2014-12-31 09:46:03 +01:00
Thomas Juberg
518b06281a If createhome is set to false, don't touch the home directory or its
permissions.
2014-12-22 14:32:41 +01:00