On 8/30/19 6:59 PM, Andrew Morgan wrote: > Thank you for your answer. The vpn box is a simple openvpn server, so > changing the linux users password is simple. I > think I am having issues with how to export those values(username and > associated) password to a file. Is there an > example of this you can point me toward? I am not seeing any online. > > Thank you
Hello Andrew,
I would do it the other way around - set up a YAML file with the usernames and
passwords on the Ansible controller
and change the passwords based on that. The YAML file should be encrypted with
Ansible vault for security.
Regards
Racke
>
> On Friday, 30 August 2019 02:33:20 UTC-4, Dick Visser wrote:
>
> It depends on what your vpn box looks like and how easy it is to change
> passwords on it.
> You can loop over the users changing their password to a random value and
> then writing those to files named after
> the user name.
> This is just one way of doing it- there are probably more.
>
> But whatever you come up with, as an affected user I wouldn’t be very
> happy if someone else sets a password for me
> and then copies that around in plain text files.
> You can try to secure this but ultimately it’s best to offer a secure way
> for users to do this themselves. Or have
> the vpn box authenticate users to some existing directory (both of which
> might not be possible, depending on your
> situation).
>
> Dick
>
>
> On Fri, 30 Aug 2019 at 08:20, Andrew Morgan <[email protected]
> <javascript:>> wrote:
>
> Hello All,
>
> I have a task to change all the password on a vpnbox and then give
> the user their password. I have been
> researching and think I found a way to do it, but I am not sure how I
> then get the password to output to a file
> to then give the user. Is there a way I can go about doing that?
> After assigning a password, out the password
> that was assigned and the user's name to a file.
>
> Thank you
>
> --
> You received this message because you are subscribed to the Google
> Groups "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it,
> send an email to [email protected]
> <javascript:>.
> To view this discussion on the web visit
>
> https://groups.google.com/d/msgid/ansible-project/5795afb5-a59d-421d-91a2-6b5a645a2c56%40googlegroups.com
>
> <https://groups.google.com/d/msgid/ansible-project/5795afb5-a59d-421d-91a2-6b5a645a2c56%40googlegroups.com?utm_medium=email&utm_source=footer>.
>
> --
> Sent from a mobile device - please excuse the brevity, spelling and
> punctuation.
>
> --
> You received this message because you are subscribed to the Google Groups
> "Ansible Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to
> [email protected]
> <mailto:[email protected]>.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/ansible-project/4c5e0a70-5619-4f0d-854c-b11cfa26d26c%40googlegroups.com
> <https://groups.google.com/d/msgid/ansible-project/4c5e0a70-5619-4f0d-854c-b11cfa26d26c%40googlegroups.com?utm_medium=email&utm_source=footer>.
--
Ecommerce and Linux consulting + Perl and web application programming.
Debian and Sympa administration. Provisioning with Ansible.
--
You received this message because you are subscribed to the Google Groups
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/ansible-project/b44f365a-900a-c706-6932-e158566825bc%40linuxia.de.
signature.asc
Description: OpenPGP digital signature
