ansible / ansible.builtin / v2.9.26 / module / na_ontap_kerberos_realm NetApp ONTAP vserver nfs kerberos realm | "added in version" 2.9 of ansible.builtin" Authors: Milan Zink (@zeten30) <zeten30@gmail.com>,<mzink@redhat.com> preview | supported by certifiedansible.builtin.na_ontap_kerberos_realm (v2.9.26) — module
pip
Install with pip install ansible==2.9.26
Create, modify or delete vserver kerberos realm configuration
- name: Create kerberos realm na_ontap_kerberos_realm: state: present realm: 'EXAMPLE.COM' vserver: 'vserver1' kdc_ip: '1.2.3.4' kdc_vendor: 'Other' hostname: "{{ netapp_hostname }}" username: "{{ netapp_username }}" password: "{{ netapp_password }}"
https: default: false description: - Enable and disable https. - Ignored when using REST as only https is supported. - Ignored when using SSL certificate authentication as it requires SSL. type: bool realm: description: - Kerberos realm name required: true type: str state: choices: - present - absent default: present description: - Whether the Kerberos realm is present or absent. type: str kdc_ip: description: - IP address of the Key Distribution Centre (KDC) server - Required if I(state=present) type: str ontapi: description: - The ontap api version to use type: int comment: description: - Optional comment type: str vserver: description: - vserver/svm with kerberos realm configured required: true type: str hostname: description: - The hostname or IP address of the ONTAP instance. required: true type: str kdc_port: description: - TCP port on the KDC to be used for Kerberos communication. - The default for this parameter is '88'. type: str password: aliases: - pass description: - Password for the specified user. type: str use_rest: choices: - Never - Always - Auto default: Auto description: - REST API if supported by the target system for all the resources and attributes the module requires. Otherwise will revert to ZAPI. - Always -- will always use the REST API - Never -- will always use the ZAPI - Auto -- will try to use the REST Api type: str username: aliases: - user description: - This can be a Cluster-scoped or SVM-scoped account, depending on whether a Cluster-level or SVM-level API is required. - For more information, please read the documentation U(https://mysupport.netapp.com/NOW/download/software/nmsdk/9.4/). - Two authentication methods are supported - 1. basic authentication, using username and password, - 2. SSL certificate authentication, using a ssl client cert file, and optionally a private key file. - To use a certificate, the certificate must have been installed in the ONTAP cluster, and cert authentication must have been enabled. type: str http_port: description: - Override the default port (80 or 443) with this port type: int clock_skew: description: - The clock skew in minutes is the tolerance for accepting tickets with time stamps that do not exactly match the host's system clock. - The default for this parameter is '5' minutes. type: str kdc_vendor: choices: - Other - Microsoft description: - The vendor of the Key Distribution Centre (KDC) server - Required if I(state=present) type: str key_filepath: description: - path to SSL client key file. type: str version_added: 20.6.0 version_added_collection: netapp.ontap pw_server_ip: description: - IP address of the host where the Kerberos password-changing server is running. - Typically, this is the same as the host indicated in the adminserver-ip. - If this parameter is omitted, the IP address in kdc-ip is used. type: str cert_filepath: description: - path to SSL client cert file (.pem). - not supported with python 2.6. type: str version_added: 20.6.0 version_added_collection: netapp.ontap feature_flags: description: - Enable or disable a new feature. - This can be used to enable an experimental feature or disable a new feature that breaks backward compatibility. - Supported keys and values are subject to change without notice. Unknown keys are ignored. type: dict version_added: 20.5.0 version_added_collection: netapp.ontap pw_server_port: description: - The TCP port on the Kerberos password-changing server where the Kerberos password-changing service is running. - The default for this parameter is '464'. type: str validate_certs: default: true description: - If set to C(no), the SSL certificates will not be validated. - This should only set to C(False) used on personally controlled sites using self-signed certificates. type: bool admin_server_ip: description: - IP address of the host where the Kerberos administration daemon is running. This is usually the master KDC. - If this parameter is omitted, the address specified in kdc_ip is used. type: str admin_server_port: description: - The TCP port on the Kerberos administration server where the Kerberos administration service is running. - The default for this parameter is '749' type: str