Remove management of login.defs

... because it is now managed by ansible[1].

[1] 2ae95677fe7b83ca1678f6e572d1fea7cfb75c21

Change-Id: Ic6e41876df0b5bc86c2f7d9b56ad6bd6e651aaad
This commit is contained in:
Takashi Kajinami 2021-01-03 11:31:17 +09:00
parent 197c12e6aa
commit 57988420d1
3 changed files with 5 additions and 136 deletions

View File

@ -1,80 +0,0 @@
# Copyright 2017 Red Hat, Inc.
# All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# == Class: tripleo::profile::base::login_defs
#
# Sets login.defs Parameters
#
# === Parameters
#
# [*step*]
# (Optional) The current step in deployment. See tripleo-heat-templates
# for more details.
# Defaults to hiera('step')
#
# [*password_max_days*]
# (Optional) Set the maximum age allowed for passwords
# Defaults to hiera('password_max_days', 99999)
#
# [*password_min_days*]
# (Optional) Set the minimum age allowed for passwords
# Defaults to hiera('password_min_days', 7)
#
# [*password_warn_age*]
# (Optional) Set the warning period for password expiration
# Defaults to hiera('password_min_len', 6)
#
# [*password_min_len*]
# (Optional) Set the minimum allowed password length.
# Defaults to hiera('password_warn_age', 7)
#
# [*fail_delay*]
# (Optional) The period of time between password retries
# Defaults to hiera('fail_delay', 4)
class tripleo::profile::base::login_defs (
$password_max_days = hiera('password_max_days', 99999),
$password_min_days = hiera('password_min_days', 7),
$password_min_len = hiera('password_min_len', 6),
$password_warn_age = hiera('password_warn_age', 7),
$fail_delay = hiera('fail_delay', 4),
$step = Integer(hiera('step'))
) {
include tripleo::profile::base::login_defs
if $step >= 1 {
package { 'shadow-utils':
ensure => 'present'
}
augeas { 'login_defs':
context => '/files/etc/login.defs',
changes => [
"set PASS_MAX_DAYS ${password_max_days}",
"set PASS_MIN_DAYS ${password_min_days}",
"set PASS_MIN_LEN ${password_min_len}",
"set PASS_WARN_AGE ${password_warn_age}",
"set FAIL_DELAY ${fail_delay}"
],
}
file { '/etc/login.defs':
ensure => file,
owner => 'root',
group => 'root',
mode => '0644',
}
}
}

View File

@ -0,0 +1,5 @@
---
upgrade:
- |
Management of login.defs file has been removed because now the file is
managed by ansible.

View File

@ -1,56 +0,0 @@
# Copyright 2017 Red Hat, Inc. # All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# Unit tests for tripleo::profile::base::login_defs
#
require 'spec_helper'
describe 'tripleo::profile::base::login_defs' do
shared_examples_for 'tripleo::profile::base::login_defs' do
context 'setting values it should contain' do
let(:params) { { :step => 1 } }
it do
is_expected.to contain_augeas('login_defs')
.with_changes(['set PASS_MAX_DAYS 99999',
'set PASS_MIN_DAYS 7',
'set PASS_MIN_LEN 6',
'set PASS_WARN_AGE 7',
'set FAIL_DELAY 4'])
end
end
context 'with file attributes' do
let(:params) { { :step => 1 } }
it do
is_expected.to contain_file('/etc/login.defs').with({
'owner' => 'root',
'group' => 'root',
'mode' => '0644',
})
end
end
end
on_supported_os.each do |os, facts|
context "on #{os}" do
let (:facts) {
facts
}
it_behaves_like 'tripleo::profile::base::login_defs'
end
end
end