Backport/2.13/78040

changelogs/fragments/permission-denied-spwd-module.yml

@@ -0,0 +1,2 @@
+bugfixes:
+  - user - Fix error "Permission denied" in user module while generating SSH keys (https://github.com/ansible/ansible/issues/78017).

lib/ansible/modules/user.py

@@ -1052,7 +1052,17 @@ def set_password_expire(self):
         max_needs_change = self.password_expire_max is not None
 
         if HAVE_SPWD:
-            shadow_info = spwd.getspnam(self.name)
+            try:
+                shadow_info = spwd.getspnam(self.name)
+            except KeyError:
+                return None, '', ''
+            except OSError as e:
+                # Python 3.6 raises PermissionError instead of KeyError
+                # Due to absence of PermissionError in python2.7 need to check
+                # errno
+                if e.errno in (errno.EACCES, errno.EPERM, errno.ENOENT):
+                    return None, '', ''
+                raise
             min_needs_change &= self.password_expire_min != shadow_info.sp_min
             max_needs_change &= self.password_expire_max != shadow_info.sp_max