password_max_age is less destructive. I chose it. On Tuesday, November 26, 2013 6:23:19 AM UTC-8, jcbollinger wrote:
> > > On Monday, November 25, 2013 5:11:13 PM UTC-6, Stuart Cracraft wrote: >> >> I have direction to use puppet >> rather than the OS and exec... >> >> > > Possibly you are looking for the 'expiry' User property: > http://docs.puppetlabs.com/references/3.stable/type.html#user-attribute-expiry<http://www.google.com/url?q=http%3A%2F%2Fdocs.puppetlabs.com%2Freferences%2F3.stable%2Ftype.html%23user-attribute-expiry&sa=D&sntz=1&usg=AFQjCNF_uxc-j6fF7qGzS0S5eJnAEt3rUw> > > user { 'alice': > # ... > expiry => 'absent' > } > > It's a bit unclear to me, though, whether there is a distinction between > the user's password expiring and the user itself expiring. Probably what > you get with that is 'chage -E' or an appropriate local analog. > > Alternatively, you may be looking for the 'max_password_age' User > property: > http://docs.puppetlabs.com/references/3.stable/type.html#user-attribute-password_max_age<http://www.google.com/url?q=http%3A%2F%2Fdocs.puppetlabs.com%2Freferences%2F3.stable%2Ftype.html%23user-attribute-password_max_age&sa=D&sntz=1&usg=AFQjCNEuysglo362cbk328OiqoUVUpMsJw>. > > Inasmuch as that looks to be designed to be backed by 'chage -M' or a local > equivalent, this may do what you want: > > user { 'bob': > # ... > max_password_age => -1 > } > > > John > > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/d5623077-ae18-43dd-a536-7cd0d3053436%40googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.
