# platform = multi_platform_rhel,multi_platform_fedora,multi_platform_ol,multi_platform_rhv
# reboot = false
# strategy = restrict
# complexity = low
# disruption = low
- (xccdf-var var_password_pam_{{{ VARIABLE }}})

- name: Ensure PAM variable {{{ VARIABLE }}} is set accordingly
{{% if product == "rhel6" %}}
  pamd:
    name: system-auth
    type: password
    control: requisite
    module_path: pam_cracklib.so
    state: args_present
    module_args: '{{{ VARIABLE }}} = {{ var_password_pam_{{{ VARIABLE }}} }}'
{{% else %}}
  lineinfile:
    create: yes
    dest: "/etc/security/pwquality.conf"
    regexp: '^#?\s*{{{ VARIABLE }}}'
    line: "{{{ VARIABLE }}} = {{ var_password_pam_{{{ VARIABLE }}} }}"
{{% endif %}}

