Change user password — Ansible module user

How to write an Ansible Playbook to assign the password “password” to an “example” user account in a Linux system with SHA512 encryption.

Luca Berton

--

How to change a user password with Ansible?

I’m going to show you a live demo with some simple Ansible code.

I’m Luca Berton and welcome to today’s episode of Ansible Pilot

Ansible change user password

Today we’re talking about the Ansible module `user`.

The full name is ansible.builtin.user, which means that is part of the collection of modules “builtin” with Ansible and shipped with it.

It’s a module pretty stable and out for years, it manages user accounts.

It supports a huge variety of Linux distributions, SunOS and macOS, and FreeBSD.

For Windows, use the `ansible.windows.win_user` module instead.

Parameters

  • name string — username
  • state string — present/absent
  • password string — Linux encrypted, macOS cleartext

This module has many parameters to perform any task.

The only required is “name”, which is the username.

In the parameter “state” we need to specify “present” options, obviously, we can’t change a password of a non-existent account.

The most important parameter is “password” which allows you to specify the new password.

For macOS target, the password is in cleartext.

For the Linux target, the “password” must be encrypted before. We could use the “passhword_hash” filter to generate a password. Please note that you could specify the encryption algorithm as well as the salt to make your password more robust.

demo

Let’s jump in a real-life Ansible Playbook to change a user account password in Linux.

  • change_password.yml
---
- name: user module…

--

--

Luca Berton

I help creative Automation DevOps, Cloud Engineer, System Administrator, and IT Professional to succeed with Ansible Technology to automate more things everyday