更改用户密码命令不适用于盐栈答案

【问题标题】：Change user password command not working for salt stack更改用户密码命令不适用于盐栈
【发布时间】：2023-01-26 03:20:46
【问题描述】：

sudo salt 'vultr.guest' shadow.set_password user '$6$SALTsalt$3ILXYcVfBr/SosT4SMXKrqtgfR6BYm2XgTLQ/Xy95gpNYT7MOEToBUWw1gtV15U2IVFngh0DtUSsgR6Khlldm1'

当运行此命令以使用 salt 更改用户密码时，我返回此错误：

The minion function caused an exception: Traceback (most recent call last):
      File "/usr/lib/python3.6/site-packages/salt/minion.py", line 1934, in _thread_return
        function_name, function_args, executors, opts, data
      File "/usr/lib/python3.6/site-packages/salt/minion.py", line 1892, in _execute_job_function
        return_data = self.executors[fname](opts, data, func, args, kwargs)
      File "/usr/lib/python3.6/site-packages/salt/loader/lazy.py", line 149, in __call__
        return self.loader.run(run_func, *args, **kwargs)
      File "/usr/lib/python3.6/site-packages/salt/loader/lazy.py", line 1201, in run
        return self._last_context.run(self._run_as, _func_or_method, *args, **kwargs)
      File "/usr/lib/python3.6/site-packages/contextvars/__init__.py", line 38, in run
        return callable(*args, **kwargs)
      File "/usr/lib/python3.6/site-packages/salt/loader/lazy.py", line 1216, in _run_as
        return _func_or_method(*args, **kwargs)
      File "/usr/lib/python3.6/site-packages/salt/executors/direct_call.py", line 10, in execute
        return func(*args, **kwargs)
      File "/usr/lib/python3.6/site-packages/salt/loader/lazy.py", line 149, in __call__
        return self.loader.run(run_func, *args, **kwargs)
      File "/usr/lib/python3.6/site-packages/salt/loader/lazy.py", line 1201, in run
        return self._last_context.run(self._run_as, _func_or_method, *args, **kwargs)
      File "/usr/lib/python3.6/site-packages/contextvars/__init__.py", line 38, in run
        return callable(*args, **kwargs)
      File "/usr/lib/python3.6/site-packages/salt/loader/lazy.py", line 1216, in _run_as
        return _func_or_method(*args, **kwargs)
      File "/usr/lib/python3.6/site-packages/salt/modules/linux_shadow.py", line 400, in set_password
        comps[2] = lstchg
    IndexError: list assignment index out of range

我使用 salt 的密码散列 python 脚本来生成密码。我尝试删除用户，然后使用 user.remove 和 user.add 模块将其添加回来。

【问题讨论】：

标签： salt-stack

【解决方案1】：

检查你的影子文件。听起来你已经关闭了密码老化。这似乎是一种相当不安全的操作方式。

有问题的行正在检查您尝试更改其密码的用户的最后更改字段。

格式是username:password:last change:min:max:warn:disable:ddate

唯一一次最后更改应该是空白的是密码老化是否已关闭。它应该是自 1970 年 1 月 1 日以来最后一次更改天数的日期。

【讨论】：