topic Does anybody developed an Ansible playbook for creating users on GAIA ? in API / CLI Discussion

Does anybody developed an Ansible playbook for creating users on GAIA ?

Joachim_Zint — Mon, 10 Apr 2017 09:33:27 GMT

I mean with the GAIA specifics and not "only" the Linux standards like the following example.

--- - name: Create user user: name=user shell=/bin/bash home=/srv/user groups=admin,sudo generate_ssh_key=yes ssh_key_bits=2048 - name: Set password to user shell: echo user:plain_text_password | sudo chpasswd no_log: True

Re: Does anybody developed an Ansible playbook for creating users on GAIA ?

Ofir_Shikolski — Sat, 02 Sep 2017 07:30:36 GMT

You can use:

- name: "Add scp user"
command: "{{ item }}"
with_items:
- clish -c 'add user scpuser uid 2600 homedir /home/scpuser' -s
- clish -c 'add rba role scpRole domain-type System readwrite-features expert' -s
- clish -c 'add rba user scpuser roles scpRole' -s
- clish -c 'set user scpuser gid 100 shell /usr/bin/scponly' -s
- clish -c 'set user scpuser password-hash <HASH>' -s

Thanks for Danny Jung‌ for HowTo - Creating an scpuser account on Gaia Clish

Thanks for @Ryan Darst for CheckMates_Aug15_Demos.zip

Re: Does anybody developed an Ansible playbook for creating users on GAIA ?

Joachim_Zint — Fri, 08 Sep 2017 06:55:38 GMT

Thx a lot....beside global script repository this is an good Option.

Re: Does anybody developed an Ansible playbook for creating users on GAIA ?

Ofir_Shikolski — Sat, 09 Sep 2017 09:25:47 GMT

My playbook (I'm using playbook and not role)

Please fix the format (scpuser/vpn123)

- name: "Add scp user"
command: "{{ item }}"
with_items:
- clish -c 'lock database override' -si
- clish -c 'add user scpuser uid 2600 homedir /home/scpuser' -si
- clish -c 'add rba role scpRole domain-type System all-features' -si
- clish -c 'add rba user scpuser roles scpRole' -si
- clish -c 'set user scpuser gid 100 shell /usr/bin/scponly' -si
- clish -c 'set user scpuser password-hash $1$O8IbUP0w$asylKUt4DUVDoemt95ubh.' -si
- clish -c 'unlock database' -si

Re: Does anybody developed an Ansible playbook for creating users on GAIA ?

Ash_Sidhu — Thu, 08 Nov 2018 15:57:08 GMT

Yes, you should able to do this using the asnible role "gaia_fw1"

Ansible Role

This blog post explains how to use the role.

Re: Does anybody developed an Ansible playbook for creating users on GAIA ?

Brede_Jensen — Fri, 03 Nov 2023 14:04:20 GMT

what to do if you have two gw in cloning group ?

I get this error : This command belongs to a cloning group synchronized feature and therefore cannot be executed in normal mode.

- name: add user

command: "{{item}}"

with_items:

- clish -c 'lock database override' -si

- clish -c 'set cloning-group-management on' -si

- clish -c 'add user test uid 0 homedir /home/test' -si

- clish -c 'add rba user test roles adminRole' -si

- clish -c 'set user test gid 0 shell /bin/bash' -si

- clish -c 'set user test realname "brede jensen"' -si

- clish -c 'set user test password-hash $password' -si

- clish -c 'unlock database' -si