Defined Type: admin::user

Defined in:
modules/admin/manifests/user.pp

Overview

A defined type for user account management.

WARNING: this is designed to NOT play well with local modifications.

Parameters

name

The user of the user to be created.

ensure

Add or remove the user account [ “present” | “absent”]

uid

The UID to set for the new account. Must be globally unique.

gid

Sets the primary group of this user.

NOTE: User created files default to this group

groups

An array of additional groups to add the user to.

NOTE: user membership should almost exclusively be handled in the external definition format (yaml)

WARNING: setting a group here means anywhere this user exists the

group _has_ to exist also.  More than likely they should be added
to the appropriate group in Admin::Groups
comment

Typicaly the realname for the user.

shell

The login shell.

privileges

An array of sudo privileges to setup Rarely should a user differ from an established group.

ssh_keys

An array of strings containing the SSH public keys.

Parameters:

  • ensure (Wmflib::Ensure) (defaults to: present)
  • uid (Optional[Integer]) (defaults to: undef)
  • gid (Optional[Integer]) (defaults to: undef)
  • groups (Array[String]) (defaults to: [])
  • comment (String) (defaults to: '')
  • shell (String) (defaults to: '/bin/bash')
  • privileges (Optional[Array[String]]) (defaults to: undef)
  • ssh_keys (Array[String]) (defaults to: [])
  • home_dir (Stdlib::Unixpath) (defaults to: "/home/${name}") 


44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
 
# File 'modules/admin/manifests/user.pp', line 44

define admin::user (
    Wmflib::Ensure          $ensure     = present,
    Optional[Integer]       $uid        = undef,
    Optional[Integer]       $gid        = undef,
    Array[String]           $groups     = [],
    String                  $comment    = '',
    String                  $shell      = '/bin/bash',
    Optional[Array[String]] $privileges = undef,
    Array[String]           $ssh_keys   = [],
    Stdlib::Unixpath        $home_dir   = "/home/${name}",
) {

    user { $name:
        ensure     => $ensure,
        name       => $name,
        uid        => $uid,
        comment    => $comment,
        gid        => $gid,
        groups     => [],
        shell      => $shell,
        managehome => false, # we do it manually below
        allowdupe  => false,
    }

    # This is all absented by the above /home/${user} cleanup
    # Puppet chokes if we try to absent subfiles to /home/${user}
    if $ensure == 'present' {
        file { $home_dir:
            ensure       => ensure_directory($ensure),
            source       => [
                "puppet:///modules/admin/home/${name}/",
                'puppet:///modules/admin/home/skel/',
            ],
            sourceselect => 'first',
            recurse      => 'remote',
            mode         => '0644',
            owner        => $name,
            group        => $gid,
            force        => true,
            require      => User[$name],
        }
    }

    # /etc/ssh/userkey is recursively-managed,
    # automatically purged, so user keys not defined
    # (as resource) will be automatically dropped.
    if !empty($ssh_keys) {
        ssh::userkey { $name:
            ensure  => $ensure,
            content => join($ssh_keys, "\n"),
        }
    }

    if !empty($privileges) {
        sudo::user { $name:
            ensure     => $ensure,
            privileges => $privileges,
        }
    }
}