changed user shell depending on role, on nagios server it requires bash access, else /sbin/nologin

manifests/main/user.pp

@@ -33,6 +33,25 @@ class cd_nagios::main::user (
     allowdupe       =>  false,
   }
 
+  if $::fqdn == $ng_nagios_server {
+
+    user {  $ng_user:
+      ensure          =>  present,
+      name            =>  $ng_user,
+      allowdupe       =>  false,
+      comment         =>  $ng_u_comment,
+      uid             =>  $ng_u_uid,
+      gid             =>  $ng_user,
+      groups          =>  $ng_u_groups,
+      managehome      =>  true,
+      home            =>  $ng_user_home,
+      shell           =>  '/bin/bash',
+      require         =>  Group[$ng_user],
+    }
+  }
+
+  else {
+
     user {  $ng_user:
       ensure          =>  present,
       name            =>  $ng_user,
@@ -46,4 +65,5 @@ class cd_nagios::main::user (
       shell           =>  $ng_user_shell,
       require         =>  Group[$ng_user],
     }
+  }
 }

manifests/params.pp

@@ -703,7 +703,7 @@ $ng_u_comment               = 'Nagios service user',
 $ng_u_uid                   = '1004',
 $ng_user_home               = '/var/spool/nagios',
 $ng_u_groups                = undef,
-$ng_user_shell              = '/bin/bash',
+$ng_user_shell              = '/sbin/nologin',
 
 # cgi settings
 $ng_context_help            = '1',