�
�Udac @` s� d d l m Z m Z m Z e Z i d d 6d g d 6d d 6Z d Z d Z d
Z d d l
m Z d d l m
Z
m Z d
Z d � Z d � Z d � Z d � Z d � Z d � Z e d k r� e � n d S( i ( t absolute_importt divisiont print_functions 1.1t metadata_versiont previewt statust communityt supported_bys�
---
module: purefa_ds
version_added: '2.6'
short_description: Configure FlashArray Directory Service
description:
- Set or erase configuration for the directory service. There is no facility
to SSL certificates at this time. Use the FlashArray GUI for this
additional configuration work.
- To modify an existing directory service configuration you must first delete
an existing configuration and then recreate with new settings.
author:
- Pure Storage Ansible Team (@sdodsley) <[email protected]>
options:
state:
type: str
description:
- Create or delete directory service configuration
default: present
choices: [ absent, present ]
enable:
description:
- Whether to enable or disable directory service support.
default: false
type: bool
uri:
type: list
description:
- A list of up to 30 URIs of the directory servers. Each URI must include
the scheme ldap:// or ldaps:// (for LDAP over SSL), a hostname, and a
domain name or IP address. For example, ldap://ad.company.com configures
the directory service with the hostname "ad" in the domain "company.com"
while specifying the unencrypted LDAP protocol.
base_dn:
type: str
description:
- Sets the base of the Distinguished Name (DN) of the directory service
groups. The base should consist of only Domain Components (DCs). The
base_dn will populate with a default value when a URI is entered by
parsing domain components from the URI. The base DN should specify DC=
for each domain component and multiple DCs should be separated by commas.
required: true
bind_password:
type: str
description:
- Sets the password of the bind_user user name account.
bind_user:
type: str
description:
- Sets the user name that can be used to bind to and query the directory.
- For Active Directory, enter the username - often referred to as
sAMAccountName or User Logon Name - of the account that is used to
perform directory lookups.
- For OpenLDAP, enter the full DN of the user.
group_base:
type: str
description:
- Specifies where the configured groups are located in the directory
tree. This field consists of Organizational Units (OUs) that combine
with the base DN attribute and the configured group CNs to complete
the full Distinguished Name of the groups. The group base should
specify OU= for each OU and multiple OUs should be separated by commas.
The order of OUs is important and should get larger in scope from left
to right. Each OU should not exceed 64 characters in length.
- Not Supported from Purity 5.2.0 or higher. Use I(purefa_dsrole) module.
ro_group:
type: str
description:
- Sets the common Name (CN) of the configured directory service group
containing users with read-only privileges on the FlashArray. This
name should be just the Common Name of the group without the CN=
specifier. Common Names should not exceed 64 characters in length.
- Not Supported from Purity 5.2.0 or higher. Use I(purefa_dsrole) module.
sa_group:
type: str
description:
- Sets the common Name (CN) of the configured directory service group
containing administrators with storage-related privileges on the
FlashArray. This name should be just the Common Name of the group
without the CN= specifier. Common Names should not exceed 64
characters in length.
- Not Supported from Purity 5.2.0 or higher. Use I(purefa_dsrole) module.
aa_group:
type: str
description:
- Sets the common Name (CN) of the directory service group containing
administrators with full privileges when managing the FlashArray.
The name should be just the Common Name of the group without the
CN= specifier. Common Names should not exceed 64 characters in length.
- Not Supported from Purity 5.2.0 or higher. Use I(purefa_dsrole) module.
extends_documentation_fragment:
- purestorage.fa
s5
- name: Delete existing directory service
purefa_ds:
state: absent
fa_url: 10.10.10.2
api_token: e31060a7-21fc-e277-6240-25983c6c4592
- name: Create directory service (disabled) - Pre-5.2.0
purefa_ds:
uri: "ldap://lab.purestorage.com"
base_dn: "DC=lab,DC=purestorage,DC=com"
bind_user: Administrator
bind_password: password
group_base: "OU=Pure-Admin"
ro_group: PureReadOnly
sa_group: PureStorage
aa_group: PureAdmin
fa_url: 10.10.10.2
api_token: e31060a7-21fc-e277-6240-25983c6c4592
- name: Create directory service (disabled) - 5.2.0 or higher
purefa_ds:
uri: "ldap://lab.purestorage.com"
base_dn: "DC=lab,DC=purestorage,DC=com"
bind_user: Administrator
bind_password: password
fa_url: 10.10.10.2
api_token: e31060a7-21fc-e277-6240-25983c6c4592
- name: Enable existing directory service
purefa_ds:
enable: true
fa_url: 10.10.10.2
api_token: e31060a7-21fc-e277-6240-25983c6c4592
- name: Disable existing directory service
purefa_ds:
enable: false
fa_url: 10.10.10.2
api_token: e31060a7-21fc-e277-6240-25983c6c4592
- name: Create directory service (enabled) - Pre-5.2.0
purefa_ds:
enable: true
uri: "ldap://lab.purestorage.com"
base_dn: "DC=lab,DC=purestorage,DC=com"
bind_user: Administrator
bind_password: password
group_base: "OU=Pure-Admin"
ro_group: PureReadOnly
sa_group: PureStorage
aa_group: PureAdmin
fa_url: 10.10.10.2
api_token: e31060a7-21fc-e277-6240-25983c6c4592
- name: Create directory service (enabled) - 5.2.0 or higher
purefa_ds:
enable: true
uri: "ldap://lab.purestorage.com"
base_dn: "DC=lab,DC=purestorage,DC=com"
bind_user: Administrator
bind_password: password
fa_url: 10.10.10.2
api_token: e31060a7-21fc-e277-6240-25983c6c4592
t
( t
AnsibleModule( t
get_systemt purefa_argument_specs 1.16c C` s t } | j d | � d S( s Update Directory Servicet changedN( t Falset exit_json( t modulet arrayR ( ( sQ /usr/lib/python2.7/site-packages/ansible/modules/storage/purestorage/purefa_ds.pyt update_ds� s c C` sR t } y | j � t } Wn! t k
r= | j d d � n X| j d | � d S( s Enable Directory Servicet msgs4 Enable Directory Service failed: Check ConfigurationR N( R
t enable_directory_servicet Truet Exceptiont fail_jsonR ( R R R ( ( sQ /usr/lib/python2.7/site-packages/ansible/modules/storage/purestorage/purefa_ds.pyt enable_ds� s
c C` sR t } y | j � t } Wn! t k
r= | j d d � n X| j d | � d S( s Disable Directory ServiceR s Disable Directory Service failedR N( R
t disable_directory_serviceR R R R ( R R R ( ( sQ /usr/lib/python2.7/site-packages/ansible/modules/storage/purestorage/purefa_ds.pyt
disable_ds� s
c C` s� t } y� | j � } | j d t � t | k re | j d d g d d d d d d d d � t } nI | j d d g d d d d d d d d d d d
d d d d d � t } Wn! t k
r� | j d d
� n X| j d | � d S( s Delete Directory Servicet enabledt urit t base_dnt bind_usert
bind_passwordt certificatet
group_baset readonly_groupt storage_admin_groupt array_admin_groupR s Delete Directory Service failedR N( R
t _list_available_rest_versionst set_directory_servicet DS_ROLE_REQUIRED_API_VERSIONR R R R ( R R R t api_version( ( sQ /usr/lib/python2.7/site-packages/ansible/modules/storage/purestorage/purefa_ds.pyt delete_ds� s0
c C` s� t } | j � } t | k r� | j d s> | j d d � n y_ | j d | j d d | j d d | j d d | j d � | j d | j d � t } Wq�t k
r� | j d d
� q�Xn� | j d | j d | j d
g } t | � r
| j d d � n y� | j d | j d d | j d d | j d d | j d d | j d d | j d d | j d d | j d
� | j d | j d � t } Wn! t k
r�| j d d
� n X| j d | � d S( s Create Directory Servicet roleR s$ At least one role must be configuredR R R R R t enables4 Create Directory Service failed: Check configurationt ro_groupt sa_groupt aa_groups% At least one group must be configuredR! R" R# R$ R N(
R
R% R' t paramsR R& R R t allR ( R R R R( t groups_rule( ( sQ /usr/lib/python2.7/site-packages/ansible/modules/storage/purestorage/purefa_ds.pyt create_ds� sB
c C` s t � } | j t d t d d � d t d d d d d d d g � d
t d d d t � d t d d d
t � d t d d � d t d d � d t d d � d t d d � d t d d � d t d d � �
� d d d d d g g } t | d | d t �} | j d } t | � } t } | j � } | d } | d rEt } n | d k rg| rgt | | � n� | r�| j d
r�| r�t
| | � n� | r�| j d
r�| r�t | | � n] | r�| j d
r�| r�t | | � n3 | r| d k rt
| | � n | j d t � d S( NR t typet listt statet strt defaultt presentt choicest absentR+ t boolR t no_logR R R! R, R- R. t required_togethert supports_check_modeR R ( R t updatet dictR
R R R/ R
t get_directory_serviceR) R R R R2 R ( t
argument_specR= R R5 R t ds_existst dirservt
ds_enabled( ( sQ /usr/lib/python2.7/site-packages/ansible/modules/storage/purestorage/purefa_ds.pyt main sF !
t __main__N( t
__future__R R R R3 t
__metaclass__t ANSIBLE_METADATAt
DOCUMENTATIONt EXAMPLESt RETURNt ansible.module_utils.basicR t ansible.module_utils.pureR
R R' R R R R) R2 RF t __name__( ( ( sQ /usr/lib/python2.7/site-packages/ansible/modules/storage/purestorage/purefa_ds.pyt <module> s$
^B ' ,
Anons79 File Manager Version 1.0, Coded By Anons79
Email: [email protected]
Anons79 Mini Shell