Try SpotterConfigure RADIUS server entries.
| "added in version" 2.0.0 of drmofu.fortimanager"
Authors: Xinwei Du (@dux-fortinet), Xing Li (@lix-fortinet), Jie Xue (@JieX19), Link Zheng (@chillancezen), Frank Shen (@fshen01), Hongbin Lu (@fgtdev-hblu)
preview | supported by community
Install with ansible-galaxy collection install drmofu.fortimanager:==2.2.2
collections:
- name: drmofu.fortimanager
version: 2.2.2This module is able to configure a FortiManager device.
Examples include all parameters and values which need to be adjusted to data sources before usage.
- name: gathering fortimanager facts
hosts: fortimanager00
gather_facts: no
connection: httpapi
collections:
- fortinet.fortimanager
vars:
ansible_httpapi_use_ssl: True
ansible_httpapi_validate_certs: False
ansible_httpapi_port: 443
tasks:
- name: retrieve all the RADIUS server entries
fmgr_fact:
facts:
selector: 'user_radius'
params:
adom: 'ansible'
radius: 'your_value'
- hosts: fortimanager00
collections:
- fortinet.fortimanager
connection: httpapi
vars:
ansible_httpapi_use_ssl: True
ansible_httpapi_validate_certs: False
ansible_httpapi_port: 443
tasks:
- name: Configure RADIUS server entries.
fmgr_user_radius:
bypass_validation: False
adom: ansible
state: present
user_radius:
name: ansible-test-radius
server: ansible
timeout: 200
adom:
description: the parameter (adom) in requested url
required: true
type: str
state:
choices:
- present
- absent
description: The directive to create, update or delete an object.
required: true
type: str
rc_failed:
description: The rc codes list with which the conditions to fail will be overriden.
elements: int
required: false
type: list
enable_log:
default: false
description: Enable/Disable logging for task.
required: false
type: bool
user_radius:
description: the top level parameters set
required: false
suboptions:
accounting-server:
description: Accounting-Server.
elements: dict
suboptions:
id:
description: ID
type: int
interface:
description: Specify outgoing interface to reach server.
type: str
interface-select-method:
choices:
- auto
- sdwan
- specify
description: Specify how to select outgoing interface to reach server.
type: str
port:
description: RADIUS accounting port number.
type: int
secret:
description: Secret key.
type: str
server:
description: no description
type: str
source-ip:
description: Source IP address for communications to the RADIUS server.
type: str
status:
choices:
- disable
- enable
description: Status.
type: str
type: list
acct-all-servers:
choices:
- disable
- enable
description: Enable/disable sending of accounting messages to all configured servers
type: str
acct-interim-interval:
description: Time in seconds between each accounting interim update message.
type: int
all-usergroup:
choices:
- disable
- enable
description: Enable/disable automatically including this RADIUS server in all
user groups.
type: str
auth-type:
choices:
- pap
- chap
- ms_chap
- ms_chap_v2
- auto
description: Authentication methods/protocols permitted for this RADIUS server.
type: str
ca-cert:
description: CA of server to trust under TLS.
type: str
class:
description: Class attribute name
type: str
client-cert:
description: Client certificate to use under TLS.
type: str
delimiter:
choices:
- plus
- comma
description: Configure delimiter to be used for separating profile group names
in the SSO attribute
type: str
dynamic_mapping:
description: Dynamic_Mapping.
elements: dict
suboptions:
_scope:
description: _Scope.
elements: dict
suboptions:
name:
description: Name.
type: str
vdom:
description: Vdom.
type: str
type: list
accounting-server:
description: Accounting-Server.
elements: dict
suboptions:
id:
description: ID
type: int
interface:
description: Specify outgoing interface to reach server.
type: str
interface-select-method:
choices:
- auto
- sdwan
- specify
description: Specify how to select outgoing interface to reach server.
type: str
port:
description: RADIUS accounting port number.
type: int
secret:
description: Secret key.
type: str
server:
description: no description
type: str
source-ip:
description: Source IP address for communications to the RADIUS server.
type: str
status:
choices:
- disable
- enable
description: Status.
type: str
type: list
acct-all-servers:
choices:
- disable
- enable
description: Enable/disable sending of accounting messages to all configured
servers
type: str
acct-interim-interval:
description: Time in seconds between each accounting interim update message.
type: int
all-usergroup:
choices:
- disable
- enable
description: Enable/disable automatically including this RADIUS server in
all user groups.
type: str
auth-type:
choices:
- pap
- chap
- ms_chap
- ms_chap_v2
- auto
description: Authentication methods/protocols permitted for this RADIUS server.
type: str
ca-cert:
description: CA of server to trust under TLS.
type: str
class:
description: Class attribute name
type: str
client-cert:
description: Client certificate to use under TLS.
type: str
delimiter:
choices:
- plus
- comma
description: Configure delimiter to be used for separating profile group names
in the SSO attribute
type: str
dp-carrier-endpoint-attribute:
choices:
- User-Name
- User-Password
- CHAP-Password
- NAS-IP-Address
- NAS-Port
- Service-Type
- Framed-Protocol
- Framed-IP-Address
- Framed-IP-Netmask
- Framed-Routing
- Filter-Id
- Framed-MTU
- Framed-Compression
- Login-IP-Host
- Login-Service
- Login-TCP-Port
- Reply-Message
- Callback-Number
- Callback-Id
- Framed-Route
- Framed-IPX-Network
- State
- Class
- Vendor-Specific
- Session-Timeout
- Idle-Timeout
- Termination-Action
- Called-Station-Id
- Calling-Station-Id
- NAS-Identifier
- Proxy-State
- Login-LAT-Service
- Login-LAT-Node
- Login-LAT-Group
- Framed-AppleTalk-Link
- Framed-AppleTalk-Network
- Framed-AppleTalk-Zone
- Acct-Status-Type
- Acct-Delay-Time
- Acct-Input-Octets
- Acct-Output-Octets
- Acct-Session-Id
- Acct-Authentic
- Acct-Session-Time
- Acct-Input-Packets
- Acct-Output-Packets
- Acct-Terminate-Cause
- Acct-Multi-Session-Id
- Acct-Link-Count
- CHAP-Challenge
- NAS-Port-Type
- Port-Limit
- Login-LAT-Port
description: Dp-Carrier-Endpoint-Attribute.
type: str
dp-carrier-endpoint-block-attribute:
choices:
- User-Name
- User-Password
- CHAP-Password
- NAS-IP-Address
- NAS-Port
- Service-Type
- Framed-Protocol
- Framed-IP-Address
- Framed-IP-Netmask
- Framed-Routing
- Filter-Id
- Framed-MTU
- Framed-Compression
- Login-IP-Host
- Login-Service
- Login-TCP-Port
- Reply-Message
- Callback-Number
- Callback-Id
- Framed-Route
- Framed-IPX-Network
- State
- Class
- Vendor-Specific
- Session-Timeout
- Idle-Timeout
- Termination-Action
- Called-Station-Id
- Calling-Station-Id
- NAS-Identifier
- Proxy-State
- Login-LAT-Service
- Login-LAT-Node
- Login-LAT-Group
- Framed-AppleTalk-Link
- Framed-AppleTalk-Network
- Framed-AppleTalk-Zone
- Acct-Status-Type
- Acct-Delay-Time
- Acct-Input-Octets
- Acct-Output-Octets
- Acct-Session-Id
- Acct-Authentic
- Acct-Session-Time
- Acct-Input-Packets
- Acct-Output-Packets
- Acct-Terminate-Cause
- Acct-Multi-Session-Id
- Acct-Link-Count
- CHAP-Challenge
- NAS-Port-Type
- Port-Limit
- Login-LAT-Port
description: Dp-Carrier-Endpoint-Block-Attribute.
type: str
dp-context-timeout:
description: Dp-Context-Timeout.
type: int
dp-flush-ip-session:
choices:
- disable
- enable
description: Dp-Flush-Ip-Session.
type: str
dp-hold-time:
description: Dp-Hold-Time.
type: int
dp-http-header:
description: Dp-Http-Header.
type: str
dp-http-header-fallback:
choices:
- ip-header-address
- default-profile
description: Dp-Http-Header-Fallback.
type: str
dp-http-header-status:
choices:
- disable
- enable
description: Dp-Http-Header-Status.
type: str
dp-http-header-suppress:
choices:
- disable
- enable
description: Dp-Http-Header-Suppress.
type: str
dp-log-dyn_flags:
choices:
- none
- protocol-error
- profile-missing
- context-missing
- accounting-stop-missed
- accounting-event
- radiusd-other
- endpoint-block
description: Dp-Log-Dyn_Flags.
elements: str
type: list
dp-log-period:
description: Dp-Log-Period.
type: int
dp-mem-percent:
description: Dp-Mem-Percent.
type: int
dp-profile-attribute:
choices:
- User-Name
- User-Password
- CHAP-Password
- NAS-IP-Address
- NAS-Port
- Service-Type
- Framed-Protocol
- Framed-IP-Address
- Framed-IP-Netmask
- Framed-Routing
- Filter-Id
- Framed-MTU
- Framed-Compression
- Login-IP-Host
- Login-Service
- Login-TCP-Port
- Reply-Message
- Callback-Number
- Callback-Id
- Framed-Route
- Framed-IPX-Network
- State
- Class
- Vendor-Specific
- Session-Timeout
- Idle-Timeout
- Termination-Action
- Called-Station-Id
- Calling-Station-Id
- NAS-Identifier
- Proxy-State
- Login-LAT-Service
- Login-LAT-Node
- Login-LAT-Group
- Framed-AppleTalk-Link
- Framed-AppleTalk-Network
- Framed-AppleTalk-Zone
- Acct-Status-Type
- Acct-Delay-Time
- Acct-Input-Octets
- Acct-Output-Octets
- Acct-Session-Id
- Acct-Authentic
- Acct-Session-Time
- Acct-Input-Packets
- Acct-Output-Packets
- Acct-Terminate-Cause
- Acct-Multi-Session-Id
- Acct-Link-Count
- CHAP-Challenge
- NAS-Port-Type
- Port-Limit
- Login-LAT-Port
description: Dp-Profile-Attribute.
type: str
dp-profile-attribute-key:
description: Dp-Profile-Attribute-Key.
type: str
dp-radius-response:
choices:
- disable
- enable
description: Dp-Radius-Response.
type: str
dp-radius-server-port:
description: Dp-Radius-Server-Port.
type: int
dp-secret:
description: Dp-Secret.
type: str
dp-validate-request-secret:
choices:
- disable
- enable
description: Dp-Validate-Request-Secret.
type: str
dynamic-profile:
choices:
- disable
- enable
description: Dynamic-Profile.
type: str
endpoint-translation:
choices:
- disable
- enable
description: Endpoint-Translation.
type: str
ep-carrier-endpoint-convert-hex:
choices:
- disable
- enable
description: Ep-Carrier-Endpoint-Convert-Hex.
type: str
ep-carrier-endpoint-header:
description: Ep-Carrier-Endpoint-Header.
type: str
ep-carrier-endpoint-header-suppress:
choices:
- disable
- enable
description: Ep-Carrier-Endpoint-Header-Suppress.
type: str
ep-carrier-endpoint-prefix:
choices:
- disable
- enable
description: Ep-Carrier-Endpoint-Prefix.
type: str
ep-carrier-endpoint-prefix-range-max:
description: Ep-Carrier-Endpoint-Prefix-Range-Max.
type: int
ep-carrier-endpoint-prefix-range-min:
description: Ep-Carrier-Endpoint-Prefix-Range-Min.
type: int
ep-carrier-endpoint-prefix-string:
description: Ep-Carrier-Endpoint-Prefix-String.
type: str
ep-carrier-endpoint-source:
choices:
- http-header
- cookie
description: Ep-Carrier-Endpoint-Source.
type: str
ep-ip-header:
description: Ep-Ip-Header.
type: str
ep-ip-header-suppress:
choices:
- disable
- enable
description: Ep-Ip-Header-Suppress.
type: str
ep-missing-header-fallback:
choices:
- session-ip
- policy-profile
description: Ep-Missing-Header-Fallback.
type: str
ep-profile-query-type:
choices:
- session-ip
- extract-ip
- extract-carrier-endpoint
description: Ep-Profile-Query-Type.
type: str
group-override-attr-type:
choices:
- filter-Id
- class
description: Group-Override-Attr-Type.
type: str
h3c-compatibility:
choices:
- disable
- enable
description: Enable/disable compatibility with the H3C, a mechanism that performs
security checking for authentication.
type: str
interface:
description: Specify outgoing interface to reach server.
type: str
interface-select-method:
choices:
- auto
- sdwan
- specify
description: Specify how to select outgoing interface to reach server.
type: str
mac-case:
choices:
- uppercase
- lowercase
description: MAC authentication case
type: str
mac-password-delimiter:
choices:
- hyphen
- single-hyphen
- colon
- none
description: MAC authentication password delimiter
type: str
mac-username-delimiter:
choices:
- hyphen
- single-hyphen
- colon
- none
description: MAC authentication username delimiter
type: str
nas-id:
description: Custom NAS identifier.
type: str
nas-id-type:
choices:
- legacy
- custom
- hostname
description: NAS identifier type configuration
type: str
nas-ip:
description: IP address used to communicate with the RADIUS server and used
as NAS-IP-Address and Called-Station-ID attributes.
type: str
password-encoding:
choices:
- ISO-8859-1
- auto
description: Password encoding.
type: str
password-renewal:
choices:
- disable
- enable
description: Enable/disable password renewal.
type: str
radius-coa:
choices:
- disable
- enable
description: Enable to allow a mechanism to change the attributes of an authentication,
authorization, and accounting session after ...
type: str
radius-port:
description: RADIUS service port number.
type: int
rsso:
choices:
- disable
- enable
description: Enable/disable RADIUS based single sign on feature.
type: str
rsso-context-timeout:
description: Time in seconds before the logged out user is removed from the
user context list of logged on users.
type: int
rsso-endpoint-attribute:
choices:
- User-Name
- User-Password
- CHAP-Password
- NAS-IP-Address
- NAS-Port
- Service-Type
- Framed-Protocol
- Framed-IP-Address
- Framed-IP-Netmask
- Framed-Routing
- Filter-Id
- Framed-MTU
- Framed-Compression
- Login-IP-Host
- Login-Service
- Login-TCP-Port
- Reply-Message
- Callback-Number
- Callback-Id
- Framed-Route
- Framed-IPX-Network
- State
- Class
- Session-Timeout
- Idle-Timeout
- Termination-Action
- Called-Station-Id
- Calling-Station-Id
- NAS-Identifier
- Proxy-State
- Login-LAT-Service
- Login-LAT-Node
- Login-LAT-Group
- Framed-AppleTalk-Link
- Framed-AppleTalk-Network
- Framed-AppleTalk-Zone
- Acct-Status-Type
- Acct-Delay-Time
- Acct-Input-Octets
- Acct-Output-Octets
- Acct-Session-Id
- Acct-Authentic
- Acct-Session-Time
- Acct-Input-Packets
- Acct-Output-Packets
- Acct-Terminate-Cause
- Acct-Multi-Session-Id
- Acct-Link-Count
- CHAP-Challenge
- NAS-Port-Type
- Port-Limit
- Login-LAT-Port
description: RADIUS attributes used to extract the user end point identifer
from the RADIUS Start record.
type: str
rsso-endpoint-block-attribute:
choices:
- User-Name
- User-Password
- CHAP-Password
- NAS-IP-Address
- NAS-Port
- Service-Type
- Framed-Protocol
- Framed-IP-Address
- Framed-IP-Netmask
- Framed-Routing
- Filter-Id
- Framed-MTU
- Framed-Compression
- Login-IP-Host
- Login-Service
- Login-TCP-Port
- Reply-Message
- Callback-Number
- Callback-Id
- Framed-Route
- Framed-IPX-Network
- State
- Class
- Session-Timeout
- Idle-Timeout
- Termination-Action
- Called-Station-Id
- Calling-Station-Id
- NAS-Identifier
- Proxy-State
- Login-LAT-Service
- Login-LAT-Node
- Login-LAT-Group
- Framed-AppleTalk-Link
- Framed-AppleTalk-Network
- Framed-AppleTalk-Zone
- Acct-Status-Type
- Acct-Delay-Time
- Acct-Input-Octets
- Acct-Output-Octets
- Acct-Session-Id
- Acct-Authentic
- Acct-Session-Time
- Acct-Input-Packets
- Acct-Output-Packets
- Acct-Terminate-Cause
- Acct-Multi-Session-Id
- Acct-Link-Count
- CHAP-Challenge
- NAS-Port-Type
- Port-Limit
- Login-LAT-Port
description: RADIUS attributes used to block a user.
type: str
rsso-ep-one-ip-only:
choices:
- disable
- enable
description: Enable/disable the replacement of old IP addresses with new ones
for the same endpoint on RADIUS accounting Start messages.
type: str
rsso-flush-ip-session:
choices:
- disable
- enable
description: Enable/disable flushing user IP sessions on RADIUS accounting
Stop messages.
type: str
rsso-log-flags:
choices:
- none
- protocol-error
- profile-missing
- context-missing
- accounting-stop-missed
- accounting-event
- radiusd-other
- endpoint-block
description: Events to log.
elements: str
type: list
rsso-log-period:
description: Time interval in seconds that group event log messages will be
generated for dynamic profile events.
type: int
rsso-radius-response:
choices:
- disable
- enable
description: Enable/disable sending RADIUS response packets after receiving
Start and Stop records.
type: str
rsso-radius-server-port:
description: UDP port to listen on for RADIUS Start and Stop records.
type: int
rsso-secret:
description: RADIUS secret used by the RADIUS accounting server.
type: str
rsso-validate-request-secret:
choices:
- disable
- enable
description: Enable/disable validating the RADIUS request shared secret in
the Start or End record.
type: str
secondary-secret:
description: Secret key to access the secondary server.
type: str
secondary-server:
description: no description
type: str
secret:
description: Pre-shared secret key used to access the primary RADIUS server.
type: str
server:
description: Primary RADIUS server CN domain name or IP address.
type: str
server-identity-check:
choices:
- disable
- enable
description: Enable/disable RADIUS server identity check
type: str
source-ip:
description: Source IP address for communications to the RADIUS server.
type: str
sso-attribute:
choices:
- User-Name
- User-Password
- CHAP-Password
- NAS-IP-Address
- NAS-Port
- Service-Type
- Framed-Protocol
- Framed-IP-Address
- Framed-IP-Netmask
- Framed-Routing
- Filter-Id
- Framed-MTU
- Framed-Compression
- Login-IP-Host
- Login-Service
- Login-TCP-Port
- Reply-Message
- Callback-Number
- Callback-Id
- Framed-Route
- Framed-IPX-Network
- State
- Class
- Session-Timeout
- Idle-Timeout
- Termination-Action
- Called-Station-Id
- Calling-Station-Id
- NAS-Identifier
- Proxy-State
- Login-LAT-Service
- Login-LAT-Node
- Login-LAT-Group
- Framed-AppleTalk-Link
- Framed-AppleTalk-Network
- Framed-AppleTalk-Zone
- Acct-Status-Type
- Acct-Delay-Time
- Acct-Input-Octets
- Acct-Output-Octets
- Acct-Session-Id
- Acct-Authentic
- Acct-Session-Time
- Acct-Input-Packets
- Acct-Output-Packets
- Acct-Terminate-Cause
- Acct-Multi-Session-Id
- Acct-Link-Count
- CHAP-Challenge
- NAS-Port-Type
- Port-Limit
- Login-LAT-Port
description: RADIUS attribute that contains the profile group name to be extracted
from the RADIUS Start record.
type: str
sso-attribute-key:
description: Key prefix for SSO group value in the SSO attribute.
type: str
sso-attribute-value-override:
choices:
- disable
- enable
description: Enable/disable override old attribute value with new value for
the same endpoint.
type: str
status-ttl:
description: Time for which server reachability is cached so that when a server
is unreachable, it will not be retried for at least ...
type: int
switch-controller-acct-fast-framedip-detect:
description: Switch-Controller-Acct-Fast-Framedip-Detect.
type: int
switch-controller-service-type:
choices:
- login
- framed
- callback-login
- callback-framed
- outbound
- administrative
- nas-prompt
- authenticate-only
- callback-nas-prompt
- call-check
- callback-administrative
description: Switch-Controller-Service-Type.
elements: str
type: list
tertiary-secret:
description: Secret key to access the tertiary server.
type: str
tertiary-server:
description: no description
type: str
timeout:
description: Time in seconds between re-sending authentication requests.
type: int
tls-min-proto-version:
choices:
- default
- TLSv1
- TLSv1-1
- TLSv1-2
- SSLv3
description: Minimum supported protocol version for TLS connections
type: str
transport-protocol:
choices:
- udp
- tcp
- tls
description: Transport protocol to be used
type: str
use-group-for-profile:
choices:
- disable
- enable
description: Use-Group-For-Profile.
type: str
use-management-vdom:
choices:
- disable
- enable
description: Enable/disable using management VDOM to send requests.
type: str
username-case-sensitive:
choices:
- disable
- enable
description: Enable/disable case sensitive user names.
type: str
type: list
group-override-attr-type:
choices:
- filter-Id
- class
description: RADIUS attribute type to override user group information.
type: str
h3c-compatibility:
choices:
- disable
- enable
description: Enable/disable compatibility with the H3C, a mechanism that performs
security checking for authentication.
type: str
interface:
description: Specify outgoing interface to reach server.
type: str
interface-select-method:
choices:
- auto
- sdwan
- specify
description: Specify how to select outgoing interface to reach server.
type: str
mac-case:
choices:
- uppercase
- lowercase
description: MAC authentication case
type: str
mac-password-delimiter:
choices:
- hyphen
- single-hyphen
- colon
- none
description: MAC authentication password delimiter
type: str
mac-username-delimiter:
choices:
- hyphen
- single-hyphen
- colon
- none
description: MAC authentication username delimiter
type: str
name:
description: RADIUS server entry name.
type: str
nas-id:
description: Custom NAS identifier.
type: str
nas-id-type:
choices:
- legacy
- custom
- hostname
description: NAS identifier type configuration
type: str
nas-ip:
description: IP address used to communicate with the RADIUS server and used as
NAS-IP-Address and Called-Station-ID attributes.
type: str
password-encoding:
choices:
- ISO-8859-1
- auto
description: Password encoding.
type: str
password-renewal:
choices:
- disable
- enable
description: Enable/disable password renewal.
type: str
radius-coa:
choices:
- disable
- enable
description: Enable to allow a mechanism to change the attributes of an authentication,
authorization, and accounting session after it is au...
type: str
radius-port:
description: RADIUS service port number.
type: int
rsso:
choices:
- disable
- enable
description: Enable/disable RADIUS based single sign on feature.
type: str
rsso-context-timeout:
description: Time in seconds before the logged out user is removed from the user
context list of logged on users.
type: int
rsso-endpoint-attribute:
choices:
- User-Name
- User-Password
- CHAP-Password
- NAS-IP-Address
- NAS-Port
- Service-Type
- Framed-Protocol
- Framed-IP-Address
- Framed-IP-Netmask
- Framed-Routing
- Filter-Id
- Framed-MTU
- Framed-Compression
- Login-IP-Host
- Login-Service
- Login-TCP-Port
- Reply-Message
- Callback-Number
- Callback-Id
- Framed-Route
- Framed-IPX-Network
- State
- Class
- Session-Timeout
- Idle-Timeout
- Termination-Action
- Called-Station-Id
- Calling-Station-Id
- NAS-Identifier
- Proxy-State
- Login-LAT-Service
- Login-LAT-Node
- Login-LAT-Group
- Framed-AppleTalk-Link
- Framed-AppleTalk-Network
- Framed-AppleTalk-Zone
- Acct-Status-Type
- Acct-Delay-Time
- Acct-Input-Octets
- Acct-Output-Octets
- Acct-Session-Id
- Acct-Authentic
- Acct-Session-Time
- Acct-Input-Packets
- Acct-Output-Packets
- Acct-Terminate-Cause
- Acct-Multi-Session-Id
- Acct-Link-Count
- CHAP-Challenge
- NAS-Port-Type
- Port-Limit
- Login-LAT-Port
description: RADIUS attributes used to extract the user end point identifer from
the RADIUS Start record.
type: str
rsso-endpoint-block-attribute:
choices:
- User-Name
- User-Password
- CHAP-Password
- NAS-IP-Address
- NAS-Port
- Service-Type
- Framed-Protocol
- Framed-IP-Address
- Framed-IP-Netmask
- Framed-Routing
- Filter-Id
- Framed-MTU
- Framed-Compression
- Login-IP-Host
- Login-Service
- Login-TCP-Port
- Reply-Message
- Callback-Number
- Callback-Id
- Framed-Route
- Framed-IPX-Network
- State
- Class
- Session-Timeout
- Idle-Timeout
- Termination-Action
- Called-Station-Id
- Calling-Station-Id
- NAS-Identifier
- Proxy-State
- Login-LAT-Service
- Login-LAT-Node
- Login-LAT-Group
- Framed-AppleTalk-Link
- Framed-AppleTalk-Network
- Framed-AppleTalk-Zone
- Acct-Status-Type
- Acct-Delay-Time
- Acct-Input-Octets
- Acct-Output-Octets
- Acct-Session-Id
- Acct-Authentic
- Acct-Session-Time
- Acct-Input-Packets
- Acct-Output-Packets
- Acct-Terminate-Cause
- Acct-Multi-Session-Id
- Acct-Link-Count
- CHAP-Challenge
- NAS-Port-Type
- Port-Limit
- Login-LAT-Port
description: RADIUS attributes used to block a user.
type: str
rsso-ep-one-ip-only:
choices:
- disable
- enable
description: Enable/disable the replacement of old IP addresses with new ones
for the same endpoint on RADIUS accounting Start messages.
type: str
rsso-flush-ip-session:
choices:
- disable
- enable
description: Enable/disable flushing user IP sessions on RADIUS accounting Stop
messages.
type: str
rsso-log-flags:
choices:
- none
- protocol-error
- profile-missing
- context-missing
- accounting-stop-missed
- accounting-event
- radiusd-other
- endpoint-block
description: Events to log.
elements: str
type: list
rsso-log-period:
description: Time interval in seconds that group event log messages will be generated
for dynamic profile events.
type: int
rsso-radius-response:
choices:
- disable
- enable
description: Enable/disable sending RADIUS response packets after receiving Start
and Stop records.
type: str
rsso-radius-server-port:
description: UDP port to listen on for RADIUS Start and Stop records.
type: int
rsso-secret:
description: RADIUS secret used by the RADIUS accounting server.
type: str
rsso-validate-request-secret:
choices:
- disable
- enable
description: Enable/disable validating the RADIUS request shared secret in the
Start or End record.
type: str
secondary-secret:
description: Secret key to access the secondary server.
type: str
secondary-server:
description: no description
type: str
secret:
description: Pre-shared secret key used to access the primary RADIUS server.
type: str
server:
description: Primary RADIUS server CN domain name or IP address.
type: str
server-identity-check:
choices:
- disable
- enable
description: Enable/disable RADIUS server identity check
type: str
source-ip:
description: Source IP address for communications to the RADIUS server.
type: str
sso-attribute:
choices:
- User-Name
- User-Password
- CHAP-Password
- NAS-IP-Address
- NAS-Port
- Service-Type
- Framed-Protocol
- Framed-IP-Address
- Framed-IP-Netmask
- Framed-Routing
- Filter-Id
- Framed-MTU
- Framed-Compression
- Login-IP-Host
- Login-Service
- Login-TCP-Port
- Reply-Message
- Callback-Number
- Callback-Id
- Framed-Route
- Framed-IPX-Network
- State
- Class
- Session-Timeout
- Idle-Timeout
- Termination-Action
- Called-Station-Id
- Calling-Station-Id
- NAS-Identifier
- Proxy-State
- Login-LAT-Service
- Login-LAT-Node
- Login-LAT-Group
- Framed-AppleTalk-Link
- Framed-AppleTalk-Network
- Framed-AppleTalk-Zone
- Acct-Status-Type
- Acct-Delay-Time
- Acct-Input-Octets
- Acct-Output-Octets
- Acct-Session-Id
- Acct-Authentic
- Acct-Session-Time
- Acct-Input-Packets
- Acct-Output-Packets
- Acct-Terminate-Cause
- Acct-Multi-Session-Id
- Acct-Link-Count
- CHAP-Challenge
- NAS-Port-Type
- Port-Limit
- Login-LAT-Port
description: RADIUS attribute that contains the profile group name to be extracted
from the RADIUS Start record.
type: str
sso-attribute-key:
description: Key prefix for SSO group value in the SSO attribute.
type: str
sso-attribute-value-override:
choices:
- disable
- enable
description: Enable/disable override old attribute value with new value for the
same endpoint.
type: str
status-ttl:
description: Time for which server reachability is cached so that when a server
is unreachable, it will not be retried for at least this per...
type: int
switch-controller-acct-fast-framedip-detect:
description: Switch controller accounting message Framed-IP detection from DHCP
snooping
type: int
switch-controller-service-type:
choices:
- login
- framed
- callback-login
- callback-framed
- outbound
- administrative
- nas-prompt
- authenticate-only
- callback-nas-prompt
- call-check
- callback-administrative
description: RADIUS service type.
elements: str
type: list
tertiary-secret:
description: Secret key to access the tertiary server.
type: str
tertiary-server:
description: no description
type: str
timeout:
description: Time in seconds between re-sending authentication requests.
type: int
tls-min-proto-version:
choices:
- default
- TLSv1
- TLSv1-1
- TLSv1-2
- SSLv3
description: Minimum supported protocol version for TLS connections
type: str
transport-protocol:
choices:
- udp
- tcp
- tls
description: Transport protocol to be used
type: str
use-management-vdom:
choices:
- disable
- enable
description: Enable/disable using management VDOM to send requests.
type: str
username-case-sensitive:
choices:
- disable
- enable
description: Enable/disable case sensitive user names.
type: str
type: dict
access_token:
description: The token to access FortiManager without using username and password.
required: false
type: str
rc_succeeded:
description: The rc codes list with which the conditions to succeed will be overriden.
elements: int
required: false
type: list
proposed_method:
choices:
- update
- set
- add
description: The overridden method for the underlying Json RPC request.
required: false
type: str
bypass_validation:
default: false
description: Only set to True when module schema diffs with FortiManager API structure,
module continues to execute without validating parameters.
required: false
type: bool
workspace_locking_adom:
description: The adom to lock for FortiManager running in workspace mode, the value
can be global and others including root.
required: false
type: str
forticloud_access_token:
description: Authenticate Ansible client with forticloud API access token.
required: false
type: str
workspace_locking_timeout:
default: 300
description: The maximum time in seconds to wait for other user to release the workspace
lock.
required: false
type: int
meta:
contains:
request_url:
description: The full url requested.
returned: always
sample: /sys/login/user
type: str
response_code:
description: The status of api request.
returned: always
sample: 0
type: int
response_data:
description: The api response.
returned: always
type: list
response_message:
description: The descriptive message of the api response.
returned: always
sample: OK.
type: str
system_information:
description: The information of the target system.
returned: always
type: dict
description: The result of the request.
returned: always
type: dict
rc:
description: The status the request.
returned: always
sample: 0
type: int
version_check_warning:
description: Warning if the parameters used in the playbook are not supported by
the current FortiManager version.
returned: complex
type: list