From 5981af269ca6887438e6b31384c7dde51ca1aed6 Mon Sep 17 00:00:00 2001 From: "Glenn K. Lockwood" Date: Sat, 25 Nov 2017 17:54:54 -0800 Subject: [PATCH] don't lock out by default --- roles/common/tasks/main.yml | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml index 394bbc4..436204d 100644 --- a/roles/common/tasks/main.yml +++ b/roles/common/tasks/main.yml @@ -84,6 +84,7 @@ groups="{{ item.groups }}" uid="{{ item.uid }}" state=present + shell=/bin/bash with_items: "{{ create_users }}" tags: [ 'users' ] @@ -95,8 +96,11 @@ tags: [ 'users' ] ### disable the 'pi' user's ability to login in with password -- name: disable 'pi' user - user: name="pi" - password="*" - state=present - tags: [ 'users' ] +### if you enable this, you may lock yourself out--you must make sure another +### user has been added with both sudo privileges and a password by which +### sudo can be authenticated +#- name: disable 'pi' user +# user: name="pi" +# password="*" +# state=present +# tags: [ 'users' ]