ansible-collections/community.mysql
1
0
Fork 0
mirror of https://github.com/ansible-collections/community.mysql.git synced 2025-05-02 23:31:27 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Add the locked attribute

Browse source 
Signed-off-by: E.S. Rosenberg a.k.a. Keeper of the Keys <es.rosenberg+github@gmail.com>
This commit is contained in:
E.S. Rosenberg a.k.a. Keeper of the Keys 2025-03-04 00:25:20 +02:00
parent 5079dc4ab7
commit 583407fbe2
2 changed files with 20 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

29
plugins/module_utils/user.py
View file

@ -61,9 +61,8 @@ def user_is_locked(cursor, user, host, host_all):
# Unless I am very much mistaken there should only be 1 answer to this query ever.
result = cursor.fetchone()
for res in result.values():
if res.endswith('ACCOUNT LOCK'):
return True
if result[0].endswith('ACCOUNT LOCK'):
return True
return False
@ -176,7 +175,7 @@ def get_existing_authentication(cursor, user, host=None):
def user_add(cursor, user, host, host_all, password, encrypted,
plugin, plugin_hash_string, plugin_auth_string, salt, new_priv,
attributes, tls_requires, reuse_existing_password, module,
password_expire, password_expire_interval):
password_expire, password_expire_interval, locked=False):
# If attributes are set, perform a sanity check to ensure server supports user attributes before creating user
if attributes and not get_attribute_support(cursor):
module.fail_json(msg="user attributes were specified but the server does not support user attributes")
@ -266,8 +265,8 @@ def user_add(cursor, user, host, host_all, password, encrypted,
cursor.execute("ALTER USER %s@%s ATTRIBUTE %s", (user, host, json.dumps(attributes)))
final_attributes = attributes_get(cursor, user, host)
# if locked:
# cursor.execute("ALTER USER %s@%s ACCOUNT LOCK", (user, host))
if locked:
cursor.execute("ALTER USER %s@%s ACCOUNT LOCK", (user, host))
return {'changed': True, 'password_changed': not used_existing_password, 'attributes': final_attributes}
@ -283,7 +282,7 @@ def is_hash(password):
def user_mod(cursor, user, host, host_all, password, encrypted,
plugin, plugin_hash_string, plugin_auth_string, salt, new_priv,
append_privs, subtract_privs, attributes, tls_requires, module,
password_expire, password_expire_interval, role=False, maria_role=False):
password_expire, password_expire_interval, locked=False, role=False, maria_role=False):
changed = False
msg = "User unchanged"
grant_option = False
@ -555,6 +554,15 @@ def user_mod(cursor, user, host, host_all, password, encrypted,
if attribute_support:
final_attributes = attributes_get(cursor, user, host)
if user_is_locked(cursor, user, host, False) != locked:
if locked:
cursor.execute("ALTER USER %s@%s ACCOUNT LOCK", (user, host))
msg = 'User locked'
else:
cursor.execute("ALTER USER %s@%s ACCOUNT UNLOCK", (user, host))
msg = 'User unlocked'
changed = True
if role:
continue
@ -578,13 +586,6 @@ def user_mod(cursor, user, host, host_all, password, encrypted,
cursor.execute(*query_with_args)
changed = True
# if user_is_locked(cursor, user, host, False) != locked:
# if locked:
# cursor.execute("ALTER USER %s@%s ACCOUNT LOCK", (user, host))
# else:
# cursor.execute("ALTER USER %s@%s ACCOUNT UNLOCK", (user, host))
# changed = True
return {'changed': changed, 'msg': msg, 'password_changed': password_changed, 'attributes': final_attributes}