users-formula/pillar.example

users:
  ## Minimal required pillar values
  auser:
    fullname: A User

  ## Full list of pillar values
  buser:
    fullname: B User
    password: $6$w.............
    home: /custom/buser
    createhome: True
    expire: 16426
    sudouser: True
    sudo_rules:
      - ALL=(root) /usr/bin/find
      - ALL=(otheruser) /usr/bin/script.sh
    sudo_defaults:
      - '!requiretty'
    shell: /bin/bash
    prime_group:
      name: primarygroup
      gid: 500
    groups:
      - users
    ssh_key_type: rsa
    # You can inline the private keys ...
    ssh_keys:
      privkey: PRIVATEKEY
      pubkey: PUBLICKEY
    # ... or you can pull them from a different pillar,
    # for example one called "ssh_keys":
    ssh_keys_pillar:
      id_rsa: "ssh_keys"
      another_key_pair: "ssh_keys"
    ssh_auth:
      - PUBLICKEY
    ssh_auth.absent:
      - PUBLICKEY_TO_BE_REMOVED
    # Generates an authorized_keys file for the user
    # with the given keys
    ssh_auth_file:
      - PUBLICKEY
    # If you prefer to keep public keys as files rather
    # than inline in pillar, this works.
    ssh_auth_sources:
      - salt://keys/buser.id_rsa.pub

    google_auth:
      ssh: |
        SOMEGAUTHHASHVAL
        " RESETTING_TIME_SKEW 46956472+2 46991595-2
        " RATE_LIMIT 3 30 1415800560
        " DISALLOW_REUSE 47193352
        " TOTP_AUTH
        11111111
        22222222
        33333333
        44444444
        55555555

  ## Absent user
  cuser:
    absent: True
    purge: True
    force: True


## Old syntax of absent_users still supported
absent_users:
  - donald
  - bad_guy
Add example data to pillar. 2013-07-28 00:53:23 +02:00			`users:`
New format of user.absent support introduced. Old format still supported. 2014-04-23 13:38:31 +02:00			`## Minimal required pillar values`
Add example data to pillar. 2013-07-28 00:53:23 +02:00			`auser:`
New format of user.absent support introduced. Old format still supported. 2014-04-23 13:38:31 +02:00			`fullname: A User`
Revised Pillar Example Revising example pillar to add a minimal required values and a full list of available values 2014-01-30 03:46:54 +01:00
New format of user.absent support introduced. Old format still supported. 2014-04-23 13:38:31 +02:00			`## Full list of pillar values`
Revised Pillar Example Revising example pillar to add a minimal required values and a full list of available values 2014-01-30 03:46:54 +01:00			`buser:`
			`fullname: B User`
Update pillar.example 2014-04-25 04:51:11 +02:00			`password: $6$w.............`
Add home to pillar.example 2014-03-30 20:31:47 +02:00			`home: /custom/buser`
Add 'createhome' option for 'user.present' state 2014-09-07 07:23:06 +02:00			`createhome: True`
Add support for setting user expire 2014-12-22 14:22:46 +01:00			`expire: 16426`
Revised Pillar Example Revising example pillar to add a minimal required values and a full list of available values 2014-01-30 03:46:54 +01:00			`sudouser: True`
Add support for setting user expire 2014-12-22 14:22:46 +01:00			`sudo_rules:`
Fix incorrect sudo_rules example 2014-03-30 22:31:20 +02:00			`- ALL=(root) /usr/bin/find`
			`- ALL=(otheruser) /usr/bin/script.sh`
possibility to define user-specific Defaults 2015-04-06 21:34:59 +02:00			`sudo_defaults:`
fixing example for sudo defaults for specific user 2015-04-11 14:14:36 +02:00			`- '!requiretty'`
Revised Pillar Example Revising example pillar to add a minimal required values and a full list of available values 2014-01-30 03:46:54 +01:00			`shell: /bin/bash`
			`prime_group:`
yaml mistype had the prime group and ssh keys values as another dict. fixed. 2014-01-30 04:53:29 +01:00			`name: primarygroup`
			`gid: 500`
Revised Pillar Example Revising example pillar to add a minimal required values and a full list of available values 2014-01-30 03:46:54 +01:00			`groups:`
			`- users`
Add and support ssh_key_type attribute to allow for dsa ssh key pairs 2014-01-31 20:44:41 +01:00			`ssh_key_type: rsa`
Add pulling keys from other pillar. Example pillar: ssh_keys: id_rsa: privkey: \| -----BEGIN RSA PRIVATE KEY----- MIIEowIBAAKCAQEAoQiwO3JhBquPAalQF9qP1lLZNXVjYMIswrMe2HcWUVBgh+vY U7sCwx/dH6+VvNwmCoqmNnP+8gTPKGl1vgAObJAnMT623dMXjVKwnEagZPRJIxDy B/HaAre9euNiY3LvIzBTWRSeMfT+rWvIKVBpvwlgGrfgz70m0pqxu+UyFbAGLin+ GpxzZAMaFpZw4sSbIlRuissXZj/sHpQb8p9M5IeO4Z3rjkCP1cxI -----END RSA PRIVATE KEY----- pubkey: \| ssh-rsa MIIEowIBAAKCAQEAoQiwO3JhBquPAalQF9qP1lLZNXVjYMIswrMe2H.... 2015-05-01 17:48:28 +02:00			`# You can inline the private keys ...`
Revised Pillar Example Revising example pillar to add a minimal required values and a full list of available values 2014-01-30 03:46:54 +01:00			`ssh_keys:`
yaml mistype had the prime group and ssh keys values as another dict. fixed. 2014-01-30 04:53:29 +01:00			`privkey: PRIVATEKEY`
			`pubkey: PUBLICKEY`
Add pulling keys from other pillar. Example pillar: ssh_keys: id_rsa: privkey: \| -----BEGIN RSA PRIVATE KEY----- MIIEowIBAAKCAQEAoQiwO3JhBquPAalQF9qP1lLZNXVjYMIswrMe2HcWUVBgh+vY U7sCwx/dH6+VvNwmCoqmNnP+8gTPKGl1vgAObJAnMT623dMXjVKwnEagZPRJIxDy B/HaAre9euNiY3LvIzBTWRSeMfT+rWvIKVBpvwlgGrfgz70m0pqxu+UyFbAGLin+ GpxzZAMaFpZw4sSbIlRuissXZj/sHpQb8p9M5IeO4Z3rjkCP1cxI -----END RSA PRIVATE KEY----- pubkey: \| ssh-rsa MIIEowIBAAKCAQEAoQiwO3JhBquPAalQF9qP1lLZNXVjYMIswrMe2H.... 2015-05-01 17:48:28 +02:00			`# ... or you can pull them from a different pillar,`
			`# for example one called "ssh_keys":`
			`ssh_keys_pillar:`
			`id_rsa: "ssh_keys"`
			`another_key_pair: "ssh_keys"`
Add example data to pillar. 2013-07-28 00:53:23 +02:00			`ssh_auth:`
Fix ssh_auth.names in example pillar 2014-02-14 15:33:03 +01:00			`- PUBLICKEY`
added option to remove ssh public keys from auth (ssh_auth.absent) 2014-08-03 01:40:27 +02:00			`ssh_auth.absent:`
			`- PUBLICKEY_TO_BE_REMOVED`
Add 'ssh_auth_file' pillar key to generate an authorized_keys file from given ssh public keys. 2015-02-12 23:09:56 +01:00			`# Generates an authorized_keys file for the user`
			`# with the given keys`
			`ssh_auth_file:`
			`- PUBLICKEY`
Added option to source ssh public keys from files. 2015-04-02 19:01:30 +02:00			`# If you prefer to keep public keys as files rather`
			`# than inline in pillar, this works.`
			`ssh_auth_sources:`
			`- salt://keys/buser.id_rsa.pub`

google auth example pillar config add; forgotten gauth state file add 2015-01-15 14:28:51 +01:00			`google_auth:`
			`ssh: \|`
			`SOMEGAUTHHASHVAL`
			`" RESETTING_TIME_SKEW 46956472+2 46991595-2`
			`" RATE_LIMIT 3 30 1415800560`
			`" DISALLOW_REUSE 47193352`
			`" TOTP_AUTH`
			`11111111`
			`22222222`
			`33333333`
			`44444444`
			`55555555`
Update pillar.example Quick example of absent users 2013-08-08 18:08:01 +02:00
New format of user.absent support introduced. Old format still supported. 2014-04-23 13:38:31 +02:00			`## Absent user`
			`cuser:`
			`absent: True`
			`purge: True`
			`force: True`


			`## Old syntax of absent_users still supported`
Update pillar.example Quick example of absent users 2013-08-08 18:08:01 +02:00			`absent_users:`
			`- donald`
			`- bad_guy`