Uploaded image for project: 'Puppet'
  1. Puppet
  2. PUP-8713

Would like to be able to lock (and unlock) users

    XMLWordPrintable

    Details

    • Template:
    • Team:
      Night's Watch
    • QA Risk Assessment:
      Needs Assessment

      Description

      Overview

      Would like to be able to lock and unlock user accounts using puppet (or with manual unlock).

      See Summary

      https://projects.puppetlabs.com/issues/219 from 8 years ago

      Current workaround

      Presently, users can lock a password by setting password => '*' or similar. The problem with doing this is that the user cannot then be unlocked with {{passwd -u} as the above code will have destroyed the original password.

      Customer impact

      While in many cases, its simple to reset a password rather then unlock it, there are cases, however-much we disapprove of them, where this could be a problem.

      For example, where the password is being used remotely and is incorporated into other scripts and systems or where passwords are controlled by systems such as cyberark where the reset process is non-trivial or slow due to external process hardening.

        Attachments

          Activity

            People

            Assignee:
            Unassigned
            Reporter:
            geoff.williams Geoff Williams
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:

                Zendesk Support