don't lock out by default

roles/common/tasks/main.yml

@@ -84,6 +84,7 @@
         groups="{{ item.groups }}"
         uid="{{ item.uid }}"
         state=present
+        shell=/bin/bash
   with_items: "{{ create_users }}"
   tags: [ 'users' ]
 
@@ -95,8 +96,11 @@
   tags: [ 'users' ]
 
 ### disable the 'pi' user's ability to login in with password
-- name: disable 'pi' user
+### if you enable this, you may lock yourself out--you must make sure another
-  user: name="pi"
+### user has been added with both sudo privileges and a password by which
-        password="*"
+### sudo can be authenticated
-        state=present
+#- name: disable 'pi' user
-  tags: [ 'users' ]
+#  user: name="pi"
+#        password="*"
+#        state=present
+#  tags: [ 'users' ]