From cb995bebc0eb713b7062f3590cf0cbb02f6366cb Mon Sep 17 00:00:00 2001
From: mh <mh@immerda.ch>
Date: Mon, 20 Oct 2008 20:51:36 +0000
Subject: added define to manage sftponly users

---
 manifests/defines.pp         | 51 ++++++++++++++++++++++++++++----------------
 manifests/groups/sftponly.pp |  7 ++++++
 2 files changed, 40 insertions(+), 18 deletions(-)
 create mode 100644 manifests/groups/sftponly.pp

diff --git a/manifests/defines.pp b/manifests/defines.pp
index c800b88..1373aa3 100644
--- a/manifests/defines.pp
+++ b/manifests/defines.pp
@@ -44,11 +44,28 @@ define user::define_user(
         membership => $membership,
     }
 
-   file{"$real_homedir":
-        ensure => directory,
-        require => User[$name],
-        owner => $name, mode => $homedir_mode;
-    } 
+    
+    case $managehome {
+        'true': {
+            file{"$real_homedir":
+                ensure => directory,
+                require => User[$name],
+                owner => $name, mode => $homedir_mode;
+            } 
+            case $gid {
+                'absent': { 
+                    File[$real_homedir]{
+                        group => $name,
+                    }
+                }
+                default: { 
+                    File[$real_homedir]{
+                        group => $gid,
+                    }
+                }
+            }
+        }
+    }
 
     case $uid {
         'absent': { info("Not defining a uid for user $name") }
@@ -87,19 +104,6 @@ define user::define_user(
 	    }
     }
 
-    case $gid {
-        'absent': { 
-            File[$real_homedir]{
-                group => $name,
-            }
-        }
-        default: { 
-            File[$real_homedir]{
-                group => $gid,
-            }
-        }
-    }
-
 	case $sshkey {
 		'absent': { info("no sshkey to manage for user $name") }
 		default: {
@@ -116,4 +120,15 @@ define user::sftp_only(
 
 ) {
     include user::groups::sftponly
+    user::define_user{"${name}":
+        name_comment => "SFTP-only user: ${name}",
+        groups => [ 'sftponly' ],        
+        managehome => 'false',        
+        shell => $operatingsystem ? {
+            debian => '/usr/sbin/nologin',
+            ubuntu => '/usr/sbin/nologin',
+            default => '/sbin/nologin'
+        },
+        require => Group['sftponly'],
+    }
 }
diff --git a/manifests/groups/sftponly.pp b/manifests/groups/sftponly.pp
new file mode 100644
index 0000000..f23a08c
--- /dev/null
+++ b/manifests/groups/sftponly.pp
@@ -0,0 +1,7 @@
+# manifests/groups/sftponly.pp
+
+class user::groups::sftponly {
+    group{'sftponly':
+        ensure => present,
+    }
+}
-- 
cgit v1.2.3