changed user shell depending on role, on nagios server it requires bash access, else /sbin/nologin

This commit is contained in:
Arne Teuke
2017-07-30 15:09:13 +01:00
parent 8f1c9766d2
commit ebdf85199f
2 changed files with 33 additions and 13 deletions

View File

@@ -33,17 +33,37 @@ class cd_nagios::main::user (
allowdupe => false,
}
user { $ng_user:
ensure => present,
name => $ng_user,
allowdupe => false,
comment => $ng_u_comment,
uid => $ng_u_uid,
gid => $ng_user,
groups => $ng_u_groups,
managehome => true,
home => $ng_user_home,
shell => $ng_user_shell,
require => Group[$ng_user],
if $::fqdn == $ng_nagios_server {
user { $ng_user:
ensure => present,
name => $ng_user,
allowdupe => false,
comment => $ng_u_comment,
uid => $ng_u_uid,
gid => $ng_user,
groups => $ng_u_groups,
managehome => true,
home => $ng_user_home,
shell => '/bin/bash',
require => Group[$ng_user],
}
}
else {
user { $ng_user:
ensure => present,
name => $ng_user,
allowdupe => false,
comment => $ng_u_comment,
uid => $ng_u_uid,
gid => $ng_user,
groups => $ng_u_groups,
managehome => true,
home => $ng_user_home,
shell => $ng_user_shell,
require => Group[$ng_user],
}
}
}

View File

@@ -703,7 +703,7 @@ $ng_u_comment = 'Nagios service user',
$ng_u_uid = '1004',
$ng_user_home = '/var/spool/nagios',
$ng_u_groups = undef,
$ng_user_shell = '/bin/bash',
$ng_user_shell = '/sbin/nologin',
# cgi settings
$ng_context_help = '1',