cyberark / ansible-modules Goto Github PK

Summary

When trying to authenticate using LDAP, the payload is not being sent.

.ansible/collections/ansible_collections/cyberark/pas/plugins/modules/cyberark_authentication.py

Steps to Reproduce

[EXAMPLE]

• name: Logon to CyberArk Vault using PAS Web Services SDK
  cyberark_authentication:
  api_base_url: "{{ CYBA_URL }}'
  validate_certs: no
  use_ldap_authentication: yes
  username: "{{ CYBA_USERNAME }}"
  password: "{{ CYBA_PASSWORD }}"

Expected Results

Is expected to receive a cyberark_session json file with the token and other parameters, but the execution fails because no payload is defined with the username and password for the authentication.

Version/Tag number

Ansible.2.9.x

Additional Information

To solve the issue:
I just added the line 188:

payload_dict = {"username": username, "password": password}

I will send a pull request in sequence.

I'm getting AttributeError: module 'urllib' has no attribute 'quote' running Python 3.7. It still seems to work correctly against 2.7.5.

I'm trying to use the example:

- hosts: localhost

  tasks:

    - name: credential retrieval basic
      cyberark_credential:
        api_base_url: "http://10.10.0.1"
        app_id: "TestID"
        query: "Safe=test;UserName=admin"
      register: {{ result }}
      no_log: true


    - name: Debug message
      debug: 
        var: {{ result }}

Obviously, using the correct values for my setup.

I'm getting an error from Ansible:

JSON: Expecting value: line 1 column 1 (char 0)

Syntax Error while loading YAML.
  found unacceptable key (unhashable type: 'AnsibleMapping')

The error appears to be in '[redacted]/cyberark.yml': line 26, column 21, but may
be elsewhere in the file depending on the exact syntax problem.

The offending line appears to be:

        query: "Safe=[redacted];UserName=admin"
                    ^ here

There appears to be both 'k=v' shorthand syntax and YAML in this task. Only one syntax may be used.
We could be wrong, but this one looks like it might be an issue with
missing quotes. Always quote template expression brackets when they
start a value. For instance:

    with_items:
      - {{ foo }}

Should be written as:

    with_items:
      - "{{ foo }}"

It appears that using k=v pairs within the query is the way this is supposed to be done, but Ansible seems to complain about it. What am I doing wrong, here?

In a situation where multiple CyberArk servers are behind an F5 load balancer, with session persistence disabled, it is possible to send multiple requests and not get the expected result. Errors claiming that the session is invalid is common and the modules fail to work.

Providing a cookie during authentication, and making it part of the cyberarksession variable would allow for consistent use under these circumstances.

Hello!

Is there a plan to include other API types than account and login/logoff? I see that you can create and manage users in CyberArk, and you can even look up passwords, but I am at a loss as to how to create or generate accounts with any of these modules.

Where is the tasks defined to make this module actually useable? I only see meta and test folders in the current master (commit 15bb7aa)