Remove management of login.defs
... because it is now managed by ansible[1]. [1] 2ae95677fe7b83ca1678f6e572d1fea7cfb75c21 Change-Id: Ic6e41876df0b5bc86c2f7d9b56ad6bd6e651aaad
This commit is contained in:
parent
197c12e6aa
commit
57988420d1
|
@ -1,80 +0,0 @@
|
|||
# Copyright 2017 Red Hat, Inc.
|
||||
# All Rights Reserved.
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
||||
# not use this file except in compliance with the License. You may obtain
|
||||
# a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
||||
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
||||
# License for the specific language governing permissions and limitations
|
||||
# under the License.
|
||||
#
|
||||
# == Class: tripleo::profile::base::login_defs
|
||||
#
|
||||
# Sets login.defs Parameters
|
||||
#
|
||||
# === Parameters
|
||||
#
|
||||
# [*step*]
|
||||
# (Optional) The current step in deployment. See tripleo-heat-templates
|
||||
# for more details.
|
||||
# Defaults to hiera('step')
|
||||
#
|
||||
# [*password_max_days*]
|
||||
# (Optional) Set the maximum age allowed for passwords
|
||||
# Defaults to hiera('password_max_days', 99999)
|
||||
#
|
||||
# [*password_min_days*]
|
||||
# (Optional) Set the minimum age allowed for passwords
|
||||
# Defaults to hiera('password_min_days', 7)
|
||||
#
|
||||
# [*password_warn_age*]
|
||||
# (Optional) Set the warning period for password expiration
|
||||
# Defaults to hiera('password_min_len', 6)
|
||||
#
|
||||
# [*password_min_len*]
|
||||
# (Optional) Set the minimum allowed password length.
|
||||
# Defaults to hiera('password_warn_age', 7)
|
||||
#
|
||||
# [*fail_delay*]
|
||||
# (Optional) The period of time between password retries
|
||||
# Defaults to hiera('fail_delay', 4)
|
||||
|
||||
class tripleo::profile::base::login_defs (
|
||||
$password_max_days = hiera('password_max_days', 99999),
|
||||
$password_min_days = hiera('password_min_days', 7),
|
||||
$password_min_len = hiera('password_min_len', 6),
|
||||
$password_warn_age = hiera('password_warn_age', 7),
|
||||
$fail_delay = hiera('fail_delay', 4),
|
||||
$step = Integer(hiera('step'))
|
||||
) {
|
||||
include tripleo::profile::base::login_defs
|
||||
|
||||
if $step >= 1 {
|
||||
package { 'shadow-utils':
|
||||
ensure => 'present'
|
||||
}
|
||||
|
||||
augeas { 'login_defs':
|
||||
context => '/files/etc/login.defs',
|
||||
changes => [
|
||||
"set PASS_MAX_DAYS ${password_max_days}",
|
||||
"set PASS_MIN_DAYS ${password_min_days}",
|
||||
"set PASS_MIN_LEN ${password_min_len}",
|
||||
"set PASS_WARN_AGE ${password_warn_age}",
|
||||
"set FAIL_DELAY ${fail_delay}"
|
||||
],
|
||||
}
|
||||
|
||||
file { '/etc/login.defs':
|
||||
ensure => file,
|
||||
owner => 'root',
|
||||
group => 'root',
|
||||
mode => '0644',
|
||||
}
|
||||
}
|
||||
}
|
|
@ -0,0 +1,5 @@
|
|||
---
|
||||
upgrade:
|
||||
- |
|
||||
Management of login.defs file has been removed because now the file is
|
||||
managed by ansible.
|
|
@ -1,56 +0,0 @@
|
|||
# Copyright 2017 Red Hat, Inc. # All Rights Reserved.
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
||||
# not use this file except in compliance with the License. You may obtain
|
||||
# a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
||||
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
||||
# License for the specific language governing permissions and limitations
|
||||
# under the License.
|
||||
#
|
||||
# Unit tests for tripleo::profile::base::login_defs
|
||||
#
|
||||
|
||||
require 'spec_helper'
|
||||
|
||||
describe 'tripleo::profile::base::login_defs' do
|
||||
|
||||
shared_examples_for 'tripleo::profile::base::login_defs' do
|
||||
|
||||
context 'setting values it should contain' do
|
||||
let(:params) { { :step => 1 } }
|
||||
it do
|
||||
is_expected.to contain_augeas('login_defs')
|
||||
.with_changes(['set PASS_MAX_DAYS 99999',
|
||||
'set PASS_MIN_DAYS 7',
|
||||
'set PASS_MIN_LEN 6',
|
||||
'set PASS_WARN_AGE 7',
|
||||
'set FAIL_DELAY 4'])
|
||||
end
|
||||
end
|
||||
|
||||
context 'with file attributes' do
|
||||
let(:params) { { :step => 1 } }
|
||||
it do
|
||||
is_expected.to contain_file('/etc/login.defs').with({
|
||||
'owner' => 'root',
|
||||
'group' => 'root',
|
||||
'mode' => '0644',
|
||||
})
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
on_supported_os.each do |os, facts|
|
||||
context "on #{os}" do
|
||||
let (:facts) {
|
||||
facts
|
||||
}
|
||||
it_behaves_like 'tripleo::profile::base::login_defs'
|
||||
end
|
||||
end
|
||||
end
|
Loading…
Reference in New Issue