Setting security_pwquality_apply_rules: yes breaks passwd command

[Anders Nelson]

If I run the openstack-ansible-hardening role setting the following var in my playbook;

security_pwquality_apply_rules: yes

the passwd command on the system breaks due to a missing library.

libpam-pwquality

Once I install the missing library the passwd command works as expected. I believe the library just needs to be installed as part of enabling security_pwquality_apply_rules.

[Anders Nelson (phixia)]

Note:

This was done in Ubuntu 14.04 LTS

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/483079

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/483079
Committed: https://git.openstack.org/cgit/openstack/ansible-hardening/commit/?id=458e0e4c902d7807b40b342b4c26ffdcec12999e
Submitter: Jenkins
Branch: master

commit 458e0e4c902d7807b40b342b4c26ffdcec12999e
Author: Major Hayden <email address hidden>
Date: Wed Jul 12 14:39:59 2017 -0500

    Install libpam-pwquality on Ubuntu

    The password quality adjustments only work if libpam-pwquality is
    installed on Ubuntu. This patch installs the package if
    `security_pwquality_apply_rules` is set to `yes`.

    Closes-Bug: 1702526
    Change-Id: Ic1a21b12138f57d4d54bfbdc6804a195573baf52

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/ansible-hardening 16.0.0.0rc2 release candidate.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/ansible-hardening 17.0.0.0b1 development milestone.