fixes #646 - add another condition to getent task

Signed-off-by: gbolo <[email protected]>
dev-sec · Mar 6, 2023 · eab6f6d · eab6f6d
1 parent 879ecef
commit eab6f6d
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/roles/os_hardening/tasks/user_accounts.yml b/roles/os_hardening/tasks/user_accounts.yml
@@ -3,7 +3,9 @@
   ansible.builtin.getent:
     database: passwd
     # creates a dict for each user containing UID/HOMEDIR etc...
-  when: getent_passwd is undefined # skip this task if "getent" has run before
+  # skip this task if getent was run before without specifying a key (single entry)
+  when: getent_passwd is undefined or
+        getent_passwd | length <= 1
 
 - name: Read local linux shadow database
   ansible.builtin.getent: