Issue #1945 has been reported by gdiffey.

----------------------------------------
Feature #1945: Add account lock and unlock support for useradd on solaris
http://projects.reductivelabs.com/issues/1945

Author: gdiffey
Status: Unreviewed
Priority: Normal
Assigned to: 
Category: 
Target version: 
Complexity: Unknown
Affected version: 0.24.2
Keywords: 


Solaris creates all new accounts where a password has not been specified as 
locked.

currently we have the following horrible define for users who we want to create 
but authenticate over ldap.

<pre>
        define user_homedir ($group, $fullname, $ingroups, $base, $id, 
$isPresent = present ) {
                @user { "$name":
                        ensure => $isPresent,
                               comment => "$fullname",
                               gid => "$group",
                               uid => $id,
                               groups => $ingroups,
                               membership => minimum,
                               shell => "/bin/sh",
                               home => "$base/$name",
                               managehome => true,
                               require => [Group[$group],File[$base]],
                               notify => Exec["unlock$name"],
                }

                ## WARNING WARNING WARNING
                ## on solaris, passwd -u not only unlocks the account,
                ## but makes it require NO PASSWORD!!!!!!
                ## you want -N, really.....

                exec { "unlock$name":
                        command => $operatingsystem ? {
                                        solaris => "/usr/bin/passwd -N $name",
                                        default => "/bin/true"
                                },
                        onlyif => "/usr/bin/grep $name.*LK /etc/shadow"
                               #refreshonly => true,
                }
</pre>



----------------------------------------
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://reductivelabs.com/redmine/my/account

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to