From e2091a0df72c368939fef989726dc06ba2ea8cfc Mon Sep 17 00:00:00 2001 From: Kevin Veen-Birkenbach Date: Fri, 1 Jan 2021 13:34:29 +0100 Subject: [PATCH] Removed ssh key generation because administrator doesn't need to connect to other pcs --- roles/native-user-administrator/Readme.md | 4 +++- roles/native-user-administrator/tasks/main.yml | 3 --- 2 files changed, 3 insertions(+), 4 deletions(-) diff --git a/roles/native-user-administrator/Readme.md b/roles/native-user-administrator/Readme.md index aff009ca..65cbed68 100644 --- a/roles/native-user-administrator/Readme.md +++ b/roles/native-user-administrator/Readme.md @@ -1,4 +1,6 @@ # Role Administrator This role creates an standard administrator user. -This user needs to type in his password before executing sudo. +This user needs to type in his password before executing sudo. For security reasons it's recommended to use this user instead of the standard root user. +This user should not be used to login to other systems. It's just there to let administration tasks run. +For this reason no ssh-keys are generated. diff --git a/roles/native-user-administrator/tasks/main.yml b/roles/native-user-administrator/tasks/main.yml index aa1a0056..add46de5 100644 --- a/roles/native-user-administrator/tasks/main.yml +++ b/roles/native-user-administrator/tasks/main.yml @@ -1,9 +1,6 @@ - name: create administrator user: name: administrator - generate_ssh_key: yes - ssh_key_bits: 4096 - ssh_key_file: .ssh/id_rsa update_password: on_create password: "{{ user_administrator_initial_password | password_hash('sha512') }}"