Giter VIP home page Giter VIP logo

ansible-role-dellos-users's Introduction

Users role

This role facilitates the configuration of global system user attributes. It supports the configuration of CLI users, and is abstracted for dellos6, dellos9, and dellos10.

The users role requires an SSH connection for connectivity to a Dell EMC Networking device. You can use any of the built-in OS connection variables .

Installation

ansible-galaxy install Dell-Networking.dellos-users

Role variables

  • Role is abstracted using the ansible_network_os variable that can take dellos9, dellos6, and dellos10 values
  • If dellos_cfg_generate is set to true, the variable generates the role configuration commands in a file
  • Any role variable with a corresponding state variable set to absent negates the configuration of that variable
  • Setting an empty value for any variable negates the corresponding configuration
  • Variables and values are case-sensitive

dellos_users list keys

Key Type Description Support
userrole string (required) Configures the role name which can be configured for users dellos9
userrole_state string: absent,present* Deletes the user role with specified name if set to absent dellos9
userrole_inherit string Configures the existing role from which to inherit permissions (optional) dellos9
role_permission dictionary Configures command permissions for roles (see role_permission.\* dellos9
role_permission.mode string: configure,exec,interface,line,route-map,router Configures the mode for the role permission dellos9
role_permission.action string: reset,absent,present* Configures whether to addrole, deleterole, or reset dellos9
role_permission.role_name string Configures the role name for the permission action dellos9
role_permission.line string Configures the LINE for the role permission (command to modify permission of) dellos9
role_permission.state absent,present* Resets the role to its original setting dellos9
username string (required) Configures the username which must adhere to specific format guidelines (valid usernames begin with A-Z, a-z, or 0-9 and can also contain @#$%^&*-_= +;<>,.~ characters) dellos6, dellos9, dellos10
password string Configures the password set for the username; password length must be at least eight characters in dellos10 and dellos6 devices dellos6, dellos9, dellos10
role string Configures the role assigned to the user dellos9, dellos10
privilege int Configures the privilege level for the user; integers between 0 and 15 for dellos9 devices; either 0, 1, or 15 for dellos6 devices; if this key is ommitted, the default privilege is 1 for both dellos9 and dellos6 dellos6, dellos9
access_class string Configures the access-class for the user dellos9
pass_key integer: 0*,7 Configures the password as encrypted if set to 7 in dellos9 devices dellos9
secret string Configures line password as secret in dellos9 devices dellos9
secret_key integer: 0*,5 Configures the secret line password using md5 encrypted algorithm dellos9
state string: absent,present* Deletes a user account if set to absent dellos6, dellos9, dellos10

NOTE: Asterisk (*) denotes the default value if none is specified.

Connection variables

Ansible Dell EMC Networking roles require connection information to establish communication with the nodes in your inventory. This information can exist in the Ansible group_vars or host_vars directories, or inventory or in the playbook itself.

Key Required Choices Description
ansible_host yes Specifies the hostname or address for connecting to the remote device over the specified transport
ansible_port no Specifies the port used to build the connection to the remote device; if value is unspecified, the ANSIBLE_REMOTE_PORT option is used; it defaults to 22
ansible_ssh_user no Specifies the username that authenticates the CLI login for the connection to the remote device; if value is unspecified, the ANSIBLE_REMOTE_USER environment variable value is used
ansible_ssh_pass no Specifies the password that authenticates the connection to the remote device
ansible_become no yes, no* Instructs the module to enter privileged mode on the remote device before sending any commands; if value is unspecified, the ANSIBLE_BECOME environment variable value is used, and the device attempts to execute all commands in non-privileged mode
ansible_become_method no enable, sudo* Instructs the module to allow the become method to be specified for handling privilege escalation; if value is unspecified, the ANSIBLE_BECOME_METHOD environment variable value is used
ansible_become_pass no Specifies the password to use if required to enter privileged mode on the remote device; if ansible_become is set to no this key is not applicable
ansible_network_os yes dellos6/dellos9/dellos10, null* Loads the correct terminal and cliconf plugins to communicate with the remote device

NOTE: Asterisk (*) denotes the default value if none is specified.

Dependencies

The dellos-users role is built on modules included in the core Ansible code. These modules were added in Ansible version 2.2.0.

Example playbook

This role is abstracted using the ansible_network_os variable that can take dellos9, dellos6, and dellos10 values. If dellos_cfg_generate is set to true, the variable generates the role configuration commands in a file. It writes a simple playbook that only references the dellos-users role. By including the role, you automatically get access to all of the tasks to configure user features.

Sample hosts file

leaf1 ansible_host= <ip_address>

Sample host_vars/leaf1

hostname: leaf1
ansible_become: yes
ansible_become_method: xxxxx
ansible_become_pass: xxxxx
ansible_ssh_user: xxxxx
ansible_ssh_pass: xxxxx
ansible_network_os: dellos9
build_dir: ../temp/dellos9

dellos_users:
   - userrole: role1
     userrole_state: present
     userrole_inherit: netoperator
   - username: u1
     password: test
     role: sysadmin
     privilege: 0
     state: absent
   - username: u1
     password: false
     privilege: 1
     access_class: a1
     role: netadmin
     state: present
   - username: u2
     secret: test1
     secret_key : 0
     access_class: a2
     privilege: 3
     role: sysadmin
     state: present
  - role_permission:
      mode: configure
      action: addrole
      role_name: 'netoperator'
      line: 'protocol spanning-tree'
      state: present

Simple playbook to setup users - leaf.yaml

- hosts: leaf1
  roles:
     - Dell-Networking.dellos-users

Run

ansible-playbook -i hosts leaf.yaml

(c) 2017 Dell Inc. or its subsidiaries. All Rights Reserved.

ansible-role-dellos-users's People

Contributors

abirami-n avatar amybuck avatar javeedf avatar neilhanlon avatar raghavendra-akkalie avatar skg-net avatar

Stargazers

 avatar

Watchers

 avatar  avatar  avatar

ansible-role-dellos-users's Issues

DellOS10 password encryption

Looks like the latest version of dellos10, 10.4.0E(R1) changes the password encryption.

OS10(config)# username test password
   String  Password format <clear text password>(Hashed to SHA-512)
                  $<id>$<salt>$<password hash>

The plain test password needs setting without the $0$ prefix

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.