Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
30 changes: 30 additions & 0 deletions ansible/roles/windows/ipa-ad-data/tasks/ad-child.yml
Original file line number Diff line number Diff line change
Expand Up @@ -94,3 +94,33 @@
AccountExpirationDate: (Get-Date).AddDays(-1)
Enabled: $true
OtherAttributes: "@{'uidNumber'='10149'; 'gidNumber'='10147'; 'loginShell'='/bin/sh'; 'homeDirectory'='/home/subexpiredaduser'; 'unixHomeDirectory'='/home/subexpiredaduser'; 'gecos'='Expired AD User'}"

- name: AD child user with CannotChangePassword
include_role:
name: windows/ipa-ad-data
tasks_from: user.yml
vars:
options:
Name: subcantchgpwduser
GivenName: SubCannotChangePwd
Surname: User
AccountPassword: Secret123
PasswordNeverExpires: $true
CannotChangePassword: $true
Enabled: $true
OtherAttributes: "@{'uidNumber'='10150'; 'gidNumber'='10147'; 'loginShell'='/bin/sh'; 'homeDirectory'='/home/subcantchgpwduser'; 'unixHomeDirectory'='/home/subcantchgpwduser'; 'gecos'='Sub Cannot Change Password User'}"

Comment thread
amore17 marked this conversation as resolved.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

User properly created:

Image

- name: AD child user with ChangePasswordAtLogon (must change password at next logon)
include_role:
name: windows/ipa-ad-data
tasks_from: user.yml
vars:
options:
Name: submustchgpwduser
GivenName: SubChangePwdAtLogon
Surname: User
AccountPassword: Secret123
ChangePasswordAtLogon: $true
PasswordNeverExpires: $false
Enabled: $true
OtherAttributes: "@{'uidNumber'='10151'; 'gidNumber'='10147'; 'loginShell'='/bin/sh'; 'homeDirectory'='/home/submustchgpwduser'; 'unixHomeDirectory'='/home/submustchgpwduser'; 'gecos'='Sub Change Password At Logon User'}"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

User properly created

Image

30 changes: 30 additions & 0 deletions ansible/roles/windows/ipa-ad-data/tasks/ad-root.yml
Original file line number Diff line number Diff line change
Expand Up @@ -187,3 +187,33 @@
AccountExpirationDate: (Get-Date).AddDays(-1)
Enabled: $true
OtherAttributes: "@{'uidNumber'='10059'; 'gidNumber'='10047'; 'loginShell'='/bin/sh'; 'homeDirectory'='/home/expiredaduser'; 'unixHomeDirectory'='/home/expiredaduser'; 'gecos'='Expired AD User'}"

- name: AD user with CannotChangePassword
include_role:
name: windows/ipa-ad-data
tasks_from: user.yml
vars:
options:
Name: cannotchangepwduser
GivenName: CannotChangePwd
Surname: User
AccountPassword: Secret123
PasswordNeverExpires: $true
CannotChangePassword: $true
Enabled: $true
OtherAttributes: "@{'uidNumber'='10061'; 'gidNumber'='10047'; 'loginShell'='/bin/sh'; 'homeDirectory'='/home/cannotchangepwduser'; 'unixHomeDirectory'='/home/cannotchangepwduser'; 'gecos'='Cannot Change Password User'}"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

User properly created

Image

- name: AD user with ChangePasswordAtLogon (must change password at next logon)
include_role:
name: windows/ipa-ad-data
tasks_from: user.yml
vars:
options:
Name: changepwdatlogonuser
GivenName: ChangePwdAtLogon
Surname: User
AccountPassword: Secret123
ChangePasswordAtLogon: $true
PasswordNeverExpires: $false
Enabled: $true
OtherAttributes: "@{'uidNumber'='10062'; 'gidNumber'='10047'; 'loginShell'='/bin/sh'; 'homeDirectory'='/home/changepwdatlogonuser'; 'unixHomeDirectory'='/home/changepwdatlogonuser'; 'gecos'='Change Password At Logon User'}"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

User properly created

Image