Allow ec2-user to pamd ssh allow user list. This will enable ec2-user to be...

Allow ec2-user to pamd ssh allow user list. This will enable ec2-user to be able to login to the sytems even without slurmd process is started

roles/pam_sshd/tasks/main.yml

 ---
+- name: "Copy pam_allow_users_list file"
+  template: src=pam_allow_users_list.j2 dest=/root/pam_allow_users_list
+  become: true
+  become_user: root
+
 - name: "Copy access.conf"
   template: src=access.conf.j2 dest=/etc/security/access.conf
   become: true

roles/pam_sshd/templates/computenodes_sshd.j2

@@ -6,6 +6,7 @@ auth       include      postlogin
 -auth      optional     pam_reauthorize.so prepare
 account    required     pam_nologin.so
 account    include      password-auth
+account    sufficient   pam_listfile.so item=user sense=allow onerr=fail file=/root/pam_allow_users_list
 account    sufficient   pam_slurm_adopt.so
 account    required     pam_access.so
 password   include      password-auth

roles/pam_sshd/templates/computenodes_sshd_centos.j2

@@ -6,6 +6,7 @@ auth       include      postlogin
 -auth      optional     pam_reauthorize.so prepare
 account    required     pam_nologin.so
 account    include      password-auth
+account    sufficient   pam_listfile.so item=user sense=allow onerr=fail file=/root/pam_allow_users_list
 account    sufficient   pam_slurm_adopt.so
 account    required     pam_access.so
 password   include      password-auth

roles/pam_sshd/templates/pam_allow_users_list.j2

+infra-user
+ec2-user