From 8fe4cd938916a0f04f9b5f9ae4101972c4e79eb0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=BCrgen=20Haas?= <jurgen@paragon-es.de>
Date: Thu, 12 Dec 2013 09:59:24 -0800
Subject: [PATCH] Remove the dependency on perl
---
files/etc_ansible_facts_d_users_sh | 5 ----
tasks/cleanup.yml | 43 +++++++++++++-----------------
2 files changed, 18 insertions(+), 30 deletions(-)
delete mode 100644 files/etc_ansible_facts_d_users_sh
diff --git a/files/etc_ansible_facts_d_users_sh b/files/etc_ansible_facts_d_users_sh
deleted file mode 100644
index 4b4c443..0000000
--- a/files/etc_ansible_facts_d_users_sh
+++ /dev/null
@@ -1,5 +0,0 @@
-#!/bin/bash
-
-echo "[" >/etc/ansible/facts.d/users.fact
-cat /etc/passwd | perl -aF: -ne 'print "{\"name\": \"",$F[0],"\",\"home\": \"",$F[5],"\"},\n" if $F[2] > 499' >>/etc/ansible/facts.d/users.fact
-echo "0]" >>/etc/ansible/facts.d/users.fact
diff --git a/tasks/cleanup.yml b/tasks/cleanup.yml
index cf84913..058b620 100644
--- a/tasks/cleanup.yml
+++ b/tasks/cleanup.yml
@@ -5,31 +5,24 @@
---
# file: cleanup.yml
-- name: "Make sure, the directory exists"
- file: dest='/etc/ansible/facts.d'
- state=directory
- owner=root
- group=root
- mode=775
-- name: "Copy the extract script"
- copy: src='etc_ansible_facts_d_users_sh'
- dest='/etc/ansible/facts.d/users.sh'
- owner=root
- group=root
- mode=755
-- name: "Extract user list"
- shell: /etc/ansible/facts.d/users.sh
-- name: "Gather facts"
- setup:
+- name: "Grab the user list"
+ shell: cat /etc/passwd
+ register: passwd
+
- name: "Unlock legitimate user accounts"
- command: usermod --unlock {{item.name}}
- with_items: ansible_local.users
- when: item.name is defined and item.name in users
+ command: usermod --unlock {{item.split(':').0}}
+ when: item.split(':').0 in users
+ and item.split(':').2|int > 499
+ with_items: passwd.stdout_lines
+
- name: "Lock deprecated user accounts"
- command: usermod --lock {{item.name}}
- with_items: ansible_local.users
- when: item.name is defined and item.name not in users
+ command: usermod --lock {{item.split(':').0}}
+ when: item.split(':').0 not in users
+ and item.split(':').2|int > 499
+ with_items: passwd.stdout_lines
+
- name: "Disable ssh keys for deprecated user accounts"
- command: rm {{item.home}}/.ssh/authorized_keys
- with_items: ansible_local.users
- when: item.name is defined and item.name not in users
+ command: rm {{item.split(':').5}}/.ssh/authorized_keys
+ when: item.split(':').0 not in users
+ and item.split(':').2|int > 499
+ with_items: passwd.stdout_lines
--
GitLab