changed user shell depending on role, on nagios server it requires bash access, else /sbin/nologin

manifests/main/user.pp

@@ -33,17 +33,37 @@ class cd_nagios::main::user (
     allowdupe       =>  false,
   }
 
-  user {  $ng_user:
+  if $::fqdn == $ng_nagios_server {
-    ensure          =>  present,
+
-    name            =>  $ng_user,
+    user {  $ng_user:
-    allowdupe       =>  false,
+      ensure          =>  present,
-    comment         =>  $ng_u_comment,
+      name            =>  $ng_user,
-    uid             =>  $ng_u_uid,
+      allowdupe       =>  false,
-    gid             =>  $ng_user,
+      comment         =>  $ng_u_comment,
-    groups          =>  $ng_u_groups,
+      uid             =>  $ng_u_uid,
-    managehome      =>  true,
+      gid             =>  $ng_user,
-    home            =>  $ng_user_home,
+      groups          =>  $ng_u_groups,
-    shell           =>  $ng_user_shell,
+      managehome      =>  true,
-    require         =>  Group[$ng_user],
+      home            =>  $ng_user_home,
+      shell           =>  '/bin/bash',
+      require         =>  Group[$ng_user],
+    }
+  }
+
+  else {
+
+    user {  $ng_user:
+      ensure          =>  present,
+      name            =>  $ng_user,
+      allowdupe       =>  false,
+      comment         =>  $ng_u_comment,
+      uid             =>  $ng_u_uid,
+      gid             =>  $ng_user,
+      groups          =>  $ng_u_groups,
+      managehome      =>  true,
+      home            =>  $ng_user_home,
+      shell           =>  $ng_user_shell,
+      require         =>  Group[$ng_user],
+    }
   }
 }

manifests/params.pp

@@ -703,7 +703,7 @@ $ng_u_comment               = 'Nagios service user',
 $ng_u_uid                   = '1004',
 $ng_user_home               = '/var/spool/nagios',
 $ng_u_groups                = undef,
-$ng_user_shell              = '/bin/bash',
+$ng_user_shell              = '/sbin/nologin',
 
 # cgi settings
 $ng_context_help            = '1',