Besides using an exec line with a case statement(to determine the specific
os''s disable command), does puppet come with a buit in method to
disable a user account?
Thanks!.
---------------------------------
Get the Yahoo! toolbar and be alerted to new email wherever you''re
surfing.
_______________________________________________
Puppet-users mailing list
Puppet-users@madstop.com
https://mail.madstop.com/mailman/listinfo/puppet-users
--On Thursday, July 05, 2007 05:42:33 AM -0700 Brent Clements <brent_puppet_ml@yahoo.com> wrote:> Besides using an exec line with a case statement(to determine the > specific os''s disable command), does puppet come with a buit in method to > disable a user account? > Thanks!.Well, not exactly. You can ensure => absent to get the user removed or you can shell => /bin/false to prevent them from logging in. -- Digant C Kasundra <digant@stanford.edu> Technical Lead, ITS Unix Systems and Applications, Stanford University
Sorry I never updated the thread we started. We went with the old standby of setting the shell of a user to /bin/nologin to "disable" them. So yes, I agree with the /bin/false idea. BC Digant C Kasundra <digant@stanford.edu> wrote: --On Thursday, July 05, 2007 05:42:33 AM -0700 Brent Clements wrote:> Besides using an exec line with a case statement(to determine the > specific os''s disable command), does puppet come with a buit in method to > disable a user account? > Thanks!.Well, not exactly. You can ensure => absent to get the user removed or you can shell => /bin/false to prevent them from logging in. -- Digant C Kasundra Technical Lead, ITS Unix Systems and Applications, Stanford University _______________________________________________ Puppet-users mailing list Puppet-users@madstop.com https://mail.madstop.com/mailman/listinfo/puppet-users --------------------------------- Pinpoint customers who are looking for what you sell. _______________________________________________ Puppet-users mailing list Puppet-users@madstop.com https://mail.madstop.com/mailman/listinfo/puppet-users
On 7/7/07, Brent Clements <brent_puppet_ml@yahoo.com> wrote:> Sorry I never updated the thread we started. We went with the old standby of > setting the shell of a user to /bin/nologin to "disable" them. > > So yes, I agree with the /bin/false idea.Remember to kill this user processes, because he/she still can have a running daemon with a preloaded shell. -- Javier