From 0a274b41684c570095a67bc5123350303842b92d Mon Sep 17 00:00:00 2001 From: A Holt Date: Thu, 4 Jun 2020 15:22:21 -0400 Subject: [PATCH] httpd: preserve www-data membership in group shadow --- roles/httpd/tasks/install.yml | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/roles/httpd/tasks/install.yml b/roles/httpd/tasks/install.yml index 861f5ee0f..1540a4cfc 100644 --- a/roles/httpd/tasks/install.yml +++ b/roles/httpd/tasks/install.yml @@ -100,13 +100,11 @@ - name: 'Create group: admin' group: name: admin - state: present -- name: Add user {{ apache_user }} (from variable apache_user) to group admin +- name: Add user {{ apache_user }} (from variable apache_user) to groups admin,shadow user: name: "{{ apache_user }}" - groups: admin - state: present + groups: admin,shadow # 2020-06-04: shadow nec for Admin Console login (this line had been clobbering user www-data's membership in group shadow, as set earlier by nginx/tasks/install.yml, SEE #2431) createhome: no - name: Create Apache dir /var/log/{{ apache_service }} ({{ apache_user }}:{{ apache_user }})