Try this: https://dpaste.com/5ENHWDV7Q
Remember to update the sshd_config to the proper path ie. /etc/ssh/sshd_config ➜ ~ grep '^AllowGroups' sshd_config AllowGroups a b c ➜ ~ ansible-playbook -i localhost, allow.yml PLAY [Configure sshd groups] ****************************************************************************************************************************************************************** Playbook run took 0 days, 0 hours, 0 minutes, 1 seconds ➜ ~ grep '^AllowGroups' sshd_config AllowGroups a b c x y z HTH El jue, 28 oct 2021 a las 21:27, Suresh Karpurapu (< [email protected]>) escribió: > Thank you so much Vladimir, > > How can we loop if we need to append multiple groups. > > Regards, > Suresh > > > On Thu, 28 Oct 2021, 6:21 pm Vladimir Botka, <[email protected]> wrote: > >> On Thu, 28 Oct 2021 05:28:27 -0700 (PDT) >> Suresh Karpurapu <[email protected]> wrote: >> >> > # grep AllowGroups /etc/ssh/sshd_config >> > AllowGroups x y z >> > >> > # grep AllowGroups /etc/ssh/sshd_config >> > AllowGroups x y z a <-----group "a" needs to be added >> at >> > the end of the line >> >> Enable *backrefs* and create non-greedy capture group in front of the >> potentially existent "a" group >> >> - lineinfile: >> path: /etc/ssh/sshd_config >> backrefs: true >> regexp: '^\s*AllowGroups\s+(.*?)(\s+a)*$' >> line: 'AllowGroups \1 a' >> >> The task is idempotent. Quoting from *regexp* >> >> https://docs.ansible.com/ansible/latest/collections/ansible/builtin/lineinfile_module.html#parameter-regexp >> >> "When modifying a line the regexp should typically match both the >> initial state of the line as well as its state after replacement by >> line to ensure idempotence." >> >> -- >> Vladimir Botka >> > -- > You received this message because you are subscribed to the Google Groups > "Ansible Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/ansible-project/CAHedzhJ2WgKYtRyPb3GMEAKRRimCJEsMpSwm9D8O5GXUxvwzuQ%40mail.gmail.com > <https://groups.google.com/d/msgid/ansible-project/CAHedzhJ2WgKYtRyPb3GMEAKRRimCJEsMpSwm9D8O5GXUxvwzuQ%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "Ansible Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CAFtje5NJBUC2wyXU%3D%2B7Z9pk1i-c-nf-xR9_UVuRfp1RY5QkYow%40mail.gmail.com.
