Does anybody developed an Ansible playbook for creating users on GAIA ?

[Joachim_Zint]

I mean with the GAIA specifics and not "only" the Linux standards like the following example.

---
- name: Create user
  user: name=user shell=/bin/bash home=/srv/user groups=admin,sudo generate_ssh_key=yes ssh_key_bits=2048
- name: Set password to user
  shell: echo user:plain_text_password | sudo chpasswd
  no_log: True

[Ofir_Shikolski]

You can use:

- name: "Add scp user"
   command: "{{ item }}"
   with_items:
     - clish -c 'add user scpuser uid 2600 homedir /home/scpuser' -s
     - clish -c 'add rba role scpRole domain-type System readwrite-features expert' -s
     - clish -c 'add rba user scpuser roles scpRole' -s
     - clish -c 'set user scpuser gid 100 shell /usr/bin/scponly' -s
     - clish -c 'set user scpuser password-hash <HASH>' -s

Thanks for Danny Jung‌ for HowTo - Creating an scpuser account on Gaia Clish 

Thanks for @Ryan Darst for CheckMates_Aug15_Demos.zip 

[Joachim_Zint]

Thx a lot....beside global script repository this is an good Option.

[Ofir_Shikolski]

My playbook (I'm using playbook and not role)

Please fix the format  (scpuser/vpn123)

- name: "Add scp user"
command: "{{ item }}"
with_items:
- clish -c 'lock database override' -si
- clish -c 'add user scpuser uid 2600 homedir /home/scpuser' -si
- clish -c 'add rba role scpRole domain-type System all-features' -si
- clish -c 'add rba user scpuser roles scpRole' -si
- clish -c 'set user scpuser gid 100 shell /usr/bin/scponly' -si
- clish -c 'set user scpuser password-hash $1$O8IbUP0w$asylKUt4DUVDoemt95ubh.' -si
- clish -c 'unlock database' -si

[Brede_Jensen]

what to do if you have two gw in cloning group ?

I get this error :  This command belongs to a cloning group synchronized feature and therefore cannot be executed in normal mode.

- name: add user

command: "{{item}}"

with_items:

- clish -c 'lock database override' -si

- clish -c 'set cloning-group-management on' -si

- clish -c 'add user test uid 0 homedir /home/test' -si

- clish -c 'add rba user test roles adminRole' -si

- clish -c 'set user test gid 0 shell /bin/bash' -si

- clish -c 'set user test realname "brede jensen"' -si

- clish -c 'set user test password-hash $password' -si

- clish -c 'unlock database' -si

[Ash_Sidhu]

Yes, you should able to do this using the asnible role "gaia_fw1" 

Ansible Role

This blog post explains how to use the role.