Uploaded image for project: 'Puppet'
  1. Puppet
  2. PUP-8713

Would like to be able to lock (and unlock) users

    Details

    • Type: New Feature
    • Status: Accepted
    • Priority: Normal
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: None
    • Template:
    • Team:
      Platform OS
    • QA Risk Assessment:
      Needs Assessment

      Description

      Overview

      Would like to be able to lock and unlock user accounts using puppet (or with manual unlock).

      See Summary

      https://projects.puppetlabs.com/issues/219 from 8 years ago

      Current workaround

      Presently, users can lock a password by setting password => '*' or similar. The problem with doing this is that the user cannot then be unlocked with {{passwd -u} as the above code will have destroyed the original password.

      Customer impact

      While in many cases, its simple to reset a password rather then unlock it, there are cases, however-much we disapprove of them, where this could be a problem.

      For example, where the password is being used remotely and is incorporated into other scripts and systems or where passwords are controlled by systems such as cyberark where the reset process is non-trivial or slow due to external process hardening.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              geoff.williams Geoff Williams
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:

                Zendesk Support