Hi
Creating an account on solaris using the user¹ type seems to create a
locked account. This then needs to be unlocked using
passwd u user
I would have thought creating an unlocked account would be more useful. Or
an extension to the user type that accepts a lock => (true|false) setting.
To test if an account is locked, use
passwd s user
HTH
Gary
_______________________________________________
Puppet-users mailing list
Puppet-users@madstop.com
https://mail.madstop.com/mailman/listinfo/puppet-users
Gary Law wrote:> Hi > > Creating an account on solaris using the ‘user’ type seems to create a > locked account. This then needs to be unlocked using > > passwd –u user > > I would have thought creating an unlocked account would be more useful. > Or an extension to the user type that accepts a lock => (true|false) > setting. > > To test if an account is locked, use > > passwd –s userThis isn''t nearly as easy as it seems, unfortunately. Each platform will have its own mechanisms for testing whether an account is locked or not. If you don''t feel comfortable sending patches, can you open this as an enhancement request? I understand the desire for it, but it''s pretty low on my priority list and it requires splitting the current user providers. For instance, I think that Solaris and Linux both use the useradd provider, but they manage locked accounts differently, so we''d need to subclass the provider for each one. I''d be willing to work with someone else who wanted to solve this problem, since it''s not actually that complicated but it''s also not all that fun. -- Do not think of knocking out another person''s brains because he differs in opinion from you. It would be as rational to knock yourself on the head because you differ from yourself ten years ago. -- Horace Mann --------------------------------------------------------------------- Luke Kanies | http://reductivelabs.com | http://madstop.com
On 23/10/06 22:26, "Luke Kanies" <luke@madstop.com> wrote:> This isn''t nearly as easy as it seems, unfortunately. Each platform > will have its own mechanisms for testing whether an account is locked or > not.True. I would like the behaviour on different platforms should be the same, however (ie defaults to unlocked or locked consistently).> If you don''t feel comfortable sending patches, can you open this as an > enhancement request?I''ve done that. However, even if I knew enough Ruby / had enough time I¹m not going to be able to produce code that works on anything other than a small subset of the puppet supported platforms thou¹. I think this might be a problem for other contributors who want to extend / change puppet types, or write new ones. Gary _______________________________________________ Puppet-users mailing list Puppet-users@madstop.com https://mail.madstop.com/mailman/listinfo/puppet-users