Now for each ssh group we report last login/account create stats.
Add the main user group to output
Add unlock user commands for locked users
Add CSV and JSON formatted output
rename user script added: renames user, home dir and connected files.
delete script fix with remove of not needed options (-g)
Update all scripts to exit only after all errors are shown, unless it
is a critical run error.
- start option for create users (-g)
- delete user script
- update documentation
- user lock user script in check user flow output
- create user has check for valid username/group name
Make sure that lock script reejcts core users
(root/ec2-user/admin/ubuntu)
Unlock script works reverse with also optional check in user_list.txt
for ssh allow/foward group type
Internal:
rename all $user to $username
Add a user lock script to move users from ssh allow/foward group to ssh
reject group.
Rename user_create.sh script to create_user.sh script and add new ssh
allow/foward flag in user_list.txt file after group block and before
password name block
Update check last login script with better add/remove from groups
-t test will NOT create an ssh key anymore. The user password list file
gets a .TEST extension
-i info is a new option to just show user/group and ssh key name without
creating anything at all.
Can be used to update old public key names to new format
Has now -t option to turn test on off via command line.
If test is on no user or groups are created, only SSH keys and the zip
file.
Standard ssh key type is now ed25519 and the password gets set with -a
100 flag.
After creation all data is ziped into the zip/ folder for download and
all PEM/PUB/password files are deleted from the folder.
The old user_zip.sh file has been removed because of this.
The script now checks for zip program and zip/ folder existing.
Also base folder must be 600 and root set
The user list file has an update for host name override after the
password file.
If this is set then the server hostname will not be used for file names.
The file name is also back to include the host name but the type changed
to have "#" as separator (can be changed in file) and also ads the ssh
key type to the file
