Role - login-defs

Login-defs role installs default parameters for user account parameters. They are used by useradd, usermod, userdel, groupadd and other group utilities. Parameters are set in /etc/login.defs file.

Role Documentation

Welcome to the “login-defs” role documentation.

Role Defaults

This section highlights all of the defaults and variables set within the “login-defs” role.

tripleo_login_defs_debug: false

# The maximum number of days a password may be used
tripleo_login_defs_password_max_days: 60
# The minimum number of days allowed between password changes
tripleo_login_defs_password_min_days: 1
# The minimal number of significant characters in the password
tripleo_login_defs_password_min_len: 5
# The number of days warning given before a password expires
tripleo_login_defs_password_warn_age: 7
# Delay in seconds before being allowed another attempt after a login failure
tripleo_login_defs_fail_delay: 4

Molecule Scenarios

Molecule is being used to test the “login-defs” role. The following section highlights the drivers in service and provides an example playbook showing how the role is leveraged.

Scenario: default

Driver: podman
Molecule Inventory
hosts:
  all:
    hosts:
      ubi8:
        ansible_python_interpreter: /usr/bin/python3
Example default playbook
- name: Converge
  hosts: all
  roles:
  - role: login-defs