---
- name: add libin sudo config
hosts: task
gather_facts: no
tasks:
- name: jiesuo
shell: pam_tally2 -u libin -r
- name: one
user:
name: "{{ item.user }}"
password: "{{ item.passwd | password_hash('sha512') }}"
with_items:
- { user: '用户',passwd: '密码' }
- { user: '用户',passwd: '密码' }
- name: two
user:
name: libin
groups: wheel
- name: three
lineinfile:
path: /etc/sudoers
regexp: '^libin'
line: 'libin ALL=(ALL) NOPASSWD: /usr/sbin/useradd,/usr/sbin/userdel,/usr/sbin/usermod,/usr/sbin/groupadd,/usr/sbin/groupmod,/usr/sbin/groupdel,/usr/bin/chage,/usr/bin/useradd,/usr/bin/userdel,/usr/bin/usermod,/usr/bin/groupadd,/usr/bin/groupmod,/usr/bin/groupdel,/usr/sbin/chage,/usr/bin/passwd [a-zA-Z]*,!/usr/bin/passwd root,/sbin/pam_tally2,/usr/sbin/pam_tally2'
