tag:blogger.com,1999:blog-2870713865752955687.post27933128411941225..comments2023-11-22T02:08:10.217-08:00Comments on Hey Stephen Wood: Using Saltstack to manage linux usersStephen Woodhttp://www.blogger.com/profile/04334788719882624757noreply@blogger.comBlogger5125tag:blogger.com,1999:blog-2870713865752955687.post-83331542055689811452014-01-31T05:25:30.424-08:002014-01-31T05:25:30.424-08:00Thanks for this post it's really interesting!
...Thanks for this post it's really interesting!<br />But there is a problem because the ssh_auth is not set to absent when the user is.<br />I think it can be improve by removing the if and use the same trick like this:<br />ssh_key_{{ name }}.{{ user.state }}:<br /> ssh_auth:<br /> - user: {{ name }}<br /> - names:<br /> - {{ user.pub_key }}<br /> - require:<br /> - {{ name }}<br />mickourshttps://www.blogger.com/profile/14348713287262060447noreply@blogger.comtag:blogger.com,1999:blog-2870713865752955687.post-81086042111503476412013-11-10T17:17:24.833-08:002013-11-10T17:17:24.833-08:00Thanks, Will! I appreciate you coming back and let...Thanks, Will! I appreciate you coming back and letting me know that. I didn't do a very good job testing after I removed my personal public keys :) I made the updates and gave you a credit at the top.Stephen Woodhttps://www.blogger.com/profile/04334788719882624757noreply@blogger.comtag:blogger.com,1999:blog-2870713865752955687.post-34026283626377346922013-11-10T09:22:13.745-08:002013-11-10T09:22:13.745-08:00Quick update: Ran the sls, and wanted to share an...Quick update: Ran the sls, and wanted to share an update.<br />1. (slight oversight) There is a missing %} which will cause the sls file render to fail (after line 12)<br />2. There is an ordering necessary. An ssh key requires a user account with home directory to exist first. I added a require statement for the user. <br />3. I'm testing this on a centos box (which does not have a 'sudo' group - so I opted to swap this out for 'wheel' - - in a perfect world I'd abstract out based on the os via grains.<br /><br />My changes are in this gist: https://gist.github.com/wcannon/7401047<br /><br />Feel free to share / change and etc. And, please keep sharing the good info.williamhttps://www.blogger.com/profile/09464267080844053306noreply@blogger.comtag:blogger.com,1999:blog-2870713865752955687.post-36250950636906757972013-11-08T17:35:54.298-08:002013-11-08T17:35:54.298-08:00Glad to be of service. Check back next week for ve...Glad to be of service. Check back next week for version 2, which supports arbitrary resource control files for users (let them get their bashrc, vimrc, etc on each host).Stephen Woodhttps://www.blogger.com/profile/04334788719882624757noreply@blogger.comtag:blogger.com,1999:blog-2870713865752955687.post-52488649259980799472013-11-08T17:17:19.441-08:002013-11-08T17:17:19.441-08:00I was about to write something very similar to thi...I was about to write something very similar to this. Thank You!!! You just saved me an hour this weekend. williamhttps://www.blogger.com/profile/09464267080844053306noreply@blogger.com