IBM-Security / isam-ansible-roles

Ansible Custom Modules, Handlers and Tasks for ISAM. Requires "ibmsecurity" python package.
Apache License 2.0
24 stars 43 forks source link

isam ansible improvements #157

Open rfransix opened 4 years ago

rfransix commented 4 years ago

Hi, trying to make Administrator Settings changes, however, there are no provided ansible scripts for IBM ISAM. Tried to mimic the Advanced Configuration Parameters yml, no success. I'm after how to write the vars.yml with the exact value and key. Thank you.

For example I want to change the Session Timeout from 30.

2nd question: if i add an incorrect key, say a group, how can it be deleted? If the key is a single value that will be over-written, what to do with a multi-value field, like a role?

sygilber commented 4 years ago

Hi, this little sample should do the trick for you (set the variables of interest to you):

  • name: setup system settings on all nodes hosts: all vars: username: "{{ your_va_username }}" password: "{{ your_va_password }}" roles:
    • role: set_admin_cfg set_admin_cfg_enableSSLv3: "False" set_admin_cfg_enabledTLS: ["TLSv1.2"] set_admin_cfg_sessionTimeout: 60

You can opt to place the role's variables here or else move then in groups/all.yml.