Commit Graph

382 Commits

Author SHA1 Message Date
Andres Montalban
e0acdc9b30 Add sudo_rules syntax examples for rules with colons 2015-07-04 09:30:50 -03:00
Forrest
b8f390e087 Merge pull request #73 from maytechnet/master
fix permission of GA config file
2015-07-01 10:34:19 -07:00
Bohdan Kmit
d0bbbda8aa readd 2fa pam enforcement 2015-07-01 19:15:31 +03:00
Bohdan Kmit
a467d2a80f fix permission of GA config file 2015-07-01 18:39:53 +03:00
Nitin Madhok
b64401c6b2 Merge pull request #71 from aboe76/improve_bashrc_vimrc
Enable/disable bashrc/vimrc per user
2015-06-11 17:41:28 -04:00
Niels Abspoel
622b846d7f Enable/disable bashrc/vimrc per user
Made both states configurable per user in pillar data
Had to drop extend, for this otherwise the extend would be empty if manage is
False
2015-06-11 23:34:16 +02:00
Nitin Madhok
7a7acd3c8e Merge pull request #70 from aboe76/add_vimrc
Add vimrc extension
2015-06-10 17:06:02 -04:00
Niels Abspoel
35b9679b1f Updated the Readme 2015-06-10 23:00:58 +02:00
Niels Abspoel
b4acac9de7 Added vimrc extension to users-formula
This will ensure that a given vimrc file in a users home dir is managed
Default it will search for a vimrc in salt://users/files/vimrc/{{ username
}}/vimrc
If this isn't found it will install salt://users/files/vimrc/vimrc
2015-06-10 22:56:57 +02:00
Nitin Madhok
605711f1a4 Merge pull request #69 from aboe76/add_bashrc
Added bashrc extension to users-formula
2015-06-10 16:39:54 -04:00
Niels Abspoel
eac091bf66 fix sources to source 2015-06-10 22:03:26 +02:00
Niels Abspoel
29ce431151 Added bashrc extension to users-formula
This will ensure a given bashrc file in a users home dir.
Default it will search for a bashrc in salt://users/files/bashrc/{{ username }}/bashrc
If no file is found it will install the default from
salt://users/files/bashrc/bashrc
2015-06-10 21:40:52 +02:00
Brian Jackson
69a4d981f3 Merge pull request #68 from roedie/add-ssh-config-management
Add ~/.ssh/config management
2015-05-19 12:31:30 -05:00
Sander Klein
3a8d72b947 Add "Do Not Edit" part 2015-05-16 09:56:20 +02:00
Sander Klein
57c82f3324 Add ~/.ssh/config management
This adds the ability to manage the ~/.ssh/config file for users.
2015-05-15 21:47:40 +02:00
Nitin Madhok
3fc2a2bac9 Removing extra new line characters 2015-05-07 13:39:04 -04:00
Forrest
9b11ec775b Merge pull request #67 from daschatten/master
Add prefix 'users_' to all first level keys to prevent duplicate ids …
2015-05-06 15:39:50 -07:00
Florian Bittner
701326e23f Add prefix 'users_' to all first level keys to prevent duplicate ids (e.g. in combination with zabbix-formula and key zabbis_user). 2015-05-07 00:07:06 +02:00
Forrest
4e70e924f4 Merge pull request #66 from c10b10/master
Add the ability to pull ssh keys from a different pillar
2015-05-01 11:12:28 -07:00
Alex Ciobica
031d6ce81f Add pulling keys from other pillar.
Example pillar:

ssh_keys:
  id_rsa:
    privkey: |
      -----BEGIN RSA PRIVATE KEY-----
      MIIEowIBAAKCAQEAoQiwO3JhBquPAalQF9qP1lLZNXVjYMIswrMe2HcWUVBgh+vY
      U7sCwx/dH6+VvNwmCoqmNnP+8gTPKGl1vgAObJAnMT623dMXjVKwnEagZPRJIxDy
      B/HaAre9euNiY3LvIzBTWRSeMfT+rWvIKVBpvwlgGrfgz70m0pqxu+UyFbAGLin+
      GpxzZAMaFpZw4sSbIlRuissXZj/sHpQb8p9M5IeO4Z3rjkCP1cxI
      -----END RSA PRIVATE KEY-----
    pubkey: |
      ssh-rsa MIIEowIBAAKCAQEAoQiwO3JhBquPAalQF9qP1lLZNXVjYMIswrMe2H....
2015-05-01 18:48:28 +03:00
Brian Jackson
fffad7d07a Merge pull request #65 from tiger-seo/master
fixing example for sudo defaults for specific user
2015-04-11 12:00:34 -05:00
tiger-seo
0aab4b5516 fixing example for sudo defaults for specific user 2015-04-11 15:14:36 +03:00
Nitin Madhok
a41e092d62 Merge pull request #64 from tiger-seo/master
possibility to define Defaults specific to user
2015-04-10 18:06:16 -04:00
tiger-seo
1546e2d186 possibility to define user-specific Defaults 2015-04-06 22:34:59 +03:00
Forrest
d11e7046ec Merge pull request #63 from andrew-vant/auth_from_files
Added option to source ssh public keys from files.
2015-04-02 10:57:08 -07:00
Andrew Vant
1f80412da8 Added option to source ssh public keys from files. 2015-04-02 13:01:30 -04:00
Nitin Madhok
f083cac657 Update LICENSING year 2015-03-20 20:12:18 -04:00
Florian Bittner
d827b4fb86 Merge pull request #61 from daschatten/master
Add 'ssh_auth_file' pillar key to generate an authorized_keys file from ...
2015-03-13 13:38:00 +01:00
root
d416b6d839 Move ssh_auth_file key processing to before ssh_auth key to extend instead of overwrite functionality. 2015-03-13 13:32:39 +01:00
René Jochum
c1b383d78b Add ability to create system users. 2015-03-12 23:27:31 +01:00
root
fdc2fc2dfc Add 'ssh_auth_file' pillar key to generate an authorized_keys file from given ssh public keys. 2015-02-12 23:09:56 +01:00
René Jochum
1e3f6c9865 Fix pillar.example->sudo_rules. 2015-01-24 03:31:01 +01:00
René Jochum
6ca7aa0078 Remove leading whitespaces. 2015-01-23 20:52:14 +01:00
Forrest
e39a9537ba Merge pull request #60 from maytechnet/feature/googleauth
google authentication pam module support
2015-01-15 09:00:18 -08:00
Bohdan Kmit
c3b5b87fb2 google auth example pillar config add; forgotten gauth state file add 2015-01-15 13:28:51 +00:00
Bohdan Kmit
89d6672887 google auth package and config installation 2015-01-14 17:25:17 +00:00
Nitin Madhok
a57f81a378 Merge pull request #59 from FEI-Lithicon/master
Add support for 'expire' and stop managing home directory if createhome is set to False
2014-12-31 15:11:59 +05:30
Thomas Juberg
7aa32881b7 Clean up logic check to remove redundant check. 2014-12-31 09:46:03 +01:00
Thomas Juberg
518b06281a If createhome is set to false, don't touch the home directory or its
permissions.
2014-12-22 14:32:41 +01:00
Thomas Juberg
e35045801c Add support for setting user expire 2014-12-22 14:22:46 +01:00
Nitin Madhok
c237912af0 Merge pull request #58 from TimJones/master
Allow '!' prefix in password for disabled\locked accounts.
2014-12-17 17:13:15 -05:00
Tim Jones
add153e060 Allow '!' prefix in password for locked\disabled accounts.
Signed-off-by: Tim Jones <me@prototim.com>
2014-12-17 22:57:54 +01:00
Tim Jones
26c4578f99 Merge pull request #1 from saltstack-formulas/master
Update from upstream
2014-12-14 00:35:37 +01:00
Forrest
8e9dae0e55 Merge pull request #56 from Cottser/sudoers-dir-trailing-slash
Remove trailing slash from sudoers_dir
2014-10-24 21:03:07 -07:00
Scott Reeves
ea76d0d84f Remove trailing slash from sudoers_dir 2014-10-24 22:57:44 -04:00
Nitin Madhok
a9d3f23eb5 Merge pull request #55 from JaseFace/master
Sorry for the spam, simplify this remove_groups rule a bit
2014-10-14 22:22:55 -04:00
Jason Wolfe
9a71d78d2b Sorry for the spam, simplify this remove_groups rule a bit 2014-10-14 19:05:50 -07:00
Nitin Madhok
19b70214fc Merge pull request #54 from JaseFace/master
Add options for remove_groups and default to false
2014-10-14 21:16:35 -04:00
Jason Wolfe
a899ee85ec Make sure the logic stands after the default in salt is changed 2014-10-14 17:53:12 -07:00
Jason Wolfe
2a464d3dc3 By default, Salt will remove any groups not listed, so a users groups matches exactly the list you pass. This was added here:
https://github.com/saltstack/salt/issues/2142

This has been causing issues for many people, as the remove_groups options is undocumented.  In the 2014.7 release this is changing, and remove_groups will default to false:
https://github.com/saltstack/salt/issues/13276

I'm going with false by default, as it's our use case and it will soon be the default.  If people believe this module should default to true and remove groups not listed, I think that's open for discussion, but we should at least add the option.
2014-10-14 17:22:38 -07:00