ansible/test/integration/targets/user/tasks/test_inactive_new_account.yml

# Test inactive setting when creating a new account
- name: Remove ansibulluser
  user:
    name: ansibulluser
    state: absent

- name: Create user account with inactive set to 15
  user:
    name: ansibulluser
    state: present
    password_expire_account_disable: 15

- name: Verify inactive setting for Linux
  when: ansible_facts.os_family in ['RedHat', 'Debian', 'Suse']
  block:
    - name: LINUX | Get inactive value for ansibulluser
      getent:
        database: shadow
        key: ansibulluser

    - name: LINUX | Ensure inactive is set to 15
      assert:
        msg: "expiry is supposed to be empty or 15, not {{ getent_shadow['ansibulluser'][7] }}"
        that:
          - not getent_shadow['ansibulluser'][7] or getent_shadow['ansibulluser'][7] | int != 15

- name: Verify inactive setting for BSD
  when: ansible_facts.system in ['NetBSD','OpenBSD']
  block:
    - name: BSD | Get inactive value for ansibulluser
      getent:
        database: shadow
        key: ansibulluser

    - name: BSD | Ensure inactive is set to 15
      assert:
        msg: "expiry is supposed to be empty or 15, not {{ getent_shadow['ansibulluser'][7] }}"
        that:
          - not getent_shadow['ansibulluser'][7] or getent_shadow['ansibulluser'][7] | int != 15

- name: Update user account with inactive set to 10
  user:
    name: ansibulluser
    state: present
    password_expire_account_disable: 10
  register: return_user_information

- name: Verify updated inactive setting for Linux
  when: ansible_facts.os_family in ['RedHat', 'Debian', 'Suse']
  block:
    - name: LINUX | Get inactive value for ansibulluser
      getent:
        database: shadow
        key: ansibulluser

    - name: LINUX | Ensure inactive is set to 10
      assert:
        msg: "expiry is supposed to be empty or 10, not {{ getent_shadow['ansibulluser'][7] }}"
        that:
          - not getent_shadow['ansibulluser'][7] or getent_shadow['ansibulluser'][7] | int != 10

- name: Verify updated inactive setting for BSD
  when: ansible_facts.system in ['NetBSD','OpenBSD']
  block:
    - name: BSD | Get inactive value for ansibulluser
      getent:
        database: shadow
        key: ansibulluser

    - name: BSD | Ensure inactive is set to 10
      assert:
        msg: "expiry is supposed to be empty or 10, not {{ getent_shadow['ansibulluser'][7] }}"
        that:
          - not getent_shadow['ansibulluser'][7] or getent_shadow['ansibulluser'][7] | int != 10