[chef] Restriction of shell access for new user on a linux box

[ANGELA EBIRIM < >]

Hello everyone,

Has anyone had experience of restricting access for a particular user using the user resource in Chef?

I'm trying to create a service user who will have restricted access on a linux box.

I have done the following:-

     user user do

supports :manage_home => true

    comment  "chef created service user: #{user}"

home "/home/#{user}"

shell '/sbin/nologin'

action :create

end

but have been unsuccessful. 

I noticed that during the chef run the following output was generated when an attempt was made to create a service user: 

Ran ["useradd", "-c", "chef created service user: svc_goagent", "-s", "/sbin/nologin", "-d", "/home/svc_goagent", "-m", "svc_goagent"] returned 3 and not 0.

Any ideas?

Many thanks

Sent from iCloud