community.general.utm_aaa_group_info (8.5.0) — module

Get info for reverse_proxy frontend entry in Sophos UTM

Authors: Johannes Brunswicker (@MatrixCrawler)

Install collection

Install with ansible-galaxy collection install community.general:==8.5.0


Add to requirements.yml

  collections:
    - name: community.general
      version: 8.5.0

Description

get info for a reverse_proxy frontend entry in SOPHOS UTM.

Usage examples

  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: Remove UTM aaa_group
  community.general.utm_aaa_group_info:
    utm_host: sophos.host.name
    utm_token: abcdefghijklmno1234
    name: TestAAAGroupEntry

Inputs

    
name:
    description:
    - The name of the object. Will be used to identify the entry
    required: true
    type: str

state:
    choices:
    - absent
    - present
    default: present
    description:
    - The desired state of the object.
    - V(present) will create or update an object.
    - V(absent) will delete an object if it was present.
    type: str

headers:
    default: {}
    description:
    - A dictionary of additional headers to be sent to POST and PUT requests.
    - Is needed for some modules.
    required: false
    type: dict

utm_host:
    description:
    - The REST Endpoint of the Sophos UTM.
    required: true
    type: str

utm_port:
    default: 4444
    description:
    - The port of the REST interface.
    type: int

utm_token:
    description:
    - The token used to identify at the REST-API. See U(https://www.sophos.com/en-us/medialibrary/PDFs/documentation/UTMonAWS/Sophos-UTM-RESTful-API.pdf?la=en),
      Chapter 2.4.2.
    required: true
    type: str

utm_protocol:
    choices:
    - http
    - https
    default: https
    description:
    - The protocol of the REST Endpoint.
    type: str

validate_certs:
    default: true
    description:
    - Whether the REST interface's ssl certificate should be verified or not.
    type: bool

Outputs

result:
  contains:
    _locked:
      description: Whether or not the object is currently locked
      type: bool
    _ref:
      description: The reference name of the object
      type: str
    _type:
      description: The type of the object
      type: str
    adirectory_groups:
      description: List of Active Directory Groups
      type: str
    adirectory_groups_sids:
      description: List of Active Directory Groups SIDS
      type: list
    backend_match:
      description: The backend to use
      type: str
    comment:
      description: The comment string
      type: str
    dynamic:
      description: Whether the group match is ipsec_dn or directory_group
      type: str
    edirectory_groups:
      description: List of eDirectory Groups
      type: str
    ipsec_dn:
      description: ipsec_dn identifier to match
      type: str
    ldap_attribute:
      description: The LDAP Attribute to match against
      type: str
    ldap_attribute_value:
      description: The LDAP Attribute Value to match against
      type: str
    members:
      description: List of member identifiers of the group
      type: list
    name:
      description: The name of the object
      type: str
    network:
      description: The identifier of the network (network/aaa)
      type: str
    radius_group:
      description: The radius group identifier
      type: str
    tacacs_group:
      description: The tacacs group identifier
      type: str
  description: The utm object that was created
  returned: success
  type: complex