30 lines
839 B
ObjectPascal
30 lines
839 B
ObjectPascal
|
# gid: by default it will take the same as the uid
|
||
|
|
define user::sftp_only(
|
||
|
|
$ensure = present,
|
||
|
|
$managehome = false,
|
||
|
|
$uid = 'absent',
|
||
|
|
$gid = 'uid',
|
||
|
|
$homedir_mode = '0750',
|
||
|
|
$password = 'absent',
|
||
|
|
$password_crypted = true
|
||
|
|
) {
|
||
|
|
include user::groups::sftponly
|
||
|
|
user::managed{"${name}":
|
||
|
|
ensure => $ensure,
|
||
|
|
uid => $uid,
|
||
|
|
gid => $gid,
|
||
|
|
name_comment => "SFTP-only_user_${name}",
|
||
|
|
groups => [ 'sftponly' ],
|
||
|
|
managehome => $managehome,
|
||
|
|
homedir_mode => $homedir_mode,
|
||
|
|
shell => $operatingsystem ? {
|
||
|
|
debian => '/usr/sbin/nologin',
|
||
|
|
ubuntu => '/usr/sbin/nologin',
|
||
|
|
default => '/sbin/nologin'
|
||
|
|
},
|
||
|
|
password => $password,
|
||
|
|
password_crypted => $password_crypted,
|
||
|
|
require => Group['sftponly'],
|
||
|
|
}
|
||
|
|
}
|