mirror of https://github.com/ansible/ansible.git
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
75 lines
2.4 KiB
YAML
75 lines
2.4 KiB
YAML
# Test inactive setting when creating a new account
|
|
- name: Remove ansibulluser
|
|
user:
|
|
name: ansibulluser
|
|
state: absent
|
|
|
|
- name: Create user account with inactive set to 15
|
|
user:
|
|
name: ansibulluser
|
|
state: present
|
|
password_expire_account_disable: 15
|
|
|
|
- name: Verify inactive setting for Linux
|
|
when: ansible_facts.os_family in ['RedHat', 'Debian', 'Suse']
|
|
block:
|
|
- name: LINUX | Get inactive value for ansibulluser
|
|
getent:
|
|
database: shadow
|
|
key: ansibulluser
|
|
|
|
- name: LINUX | Ensure inactive is set to 15
|
|
assert:
|
|
msg: "expiry is supposed to be empty or 15, not {{ getent_shadow['ansibulluser'][7] }}"
|
|
that:
|
|
- not getent_shadow['ansibulluser'][7] or getent_shadow['ansibulluser'][7] | int != 15
|
|
|
|
- name: Verify inactive setting for BSD
|
|
when: ansible_facts.system in ['NetBSD','OpenBSD']
|
|
block:
|
|
- name: BSD | Get inactive value for ansibulluser
|
|
getent:
|
|
database: shadow
|
|
key: ansibulluser
|
|
|
|
- name: BSD | Ensure inactive is set to 15
|
|
assert:
|
|
msg: "expiry is supposed to be empty or 15, not {{ getent_shadow['ansibulluser'][7] }}"
|
|
that:
|
|
- not getent_shadow['ansibulluser'][7] or getent_shadow['ansibulluser'][7] | int != 15
|
|
|
|
- name: Update user account with inactive set to 10
|
|
user:
|
|
name: ansibulluser
|
|
state: present
|
|
password_expire_account_disable: 10
|
|
register: return_user_information
|
|
|
|
- name: Verify updated inactive setting for Linux
|
|
when: ansible_facts.os_family in ['RedHat', 'Debian', 'Suse']
|
|
block:
|
|
- name: LINUX | Get inactive value for ansibulluser
|
|
getent:
|
|
database: shadow
|
|
key: ansibulluser
|
|
|
|
- name: LINUX | Ensure inactive is set to 10
|
|
assert:
|
|
msg: "expiry is supposed to be empty or 10, not {{ getent_shadow['ansibulluser'][7] }}"
|
|
that:
|
|
- not getent_shadow['ansibulluser'][7] or getent_shadow['ansibulluser'][7] | int != 10
|
|
|
|
- name: Verify updated inactive setting for BSD
|
|
when: ansible_facts.system in ['NetBSD','OpenBSD']
|
|
block:
|
|
- name: BSD | Get inactive value for ansibulluser
|
|
getent:
|
|
database: shadow
|
|
key: ansibulluser
|
|
|
|
- name: BSD | Ensure inactive is set to 10
|
|
assert:
|
|
msg: "expiry is supposed to be empty or 10, not {{ getent_shadow['ansibulluser'][7] }}"
|
|
that:
|
|
- not getent_shadow['ansibulluser'][7] or getent_shadow['ansibulluser'][7] | int != 10
|