85 lines
2.4 KiB
YAML
85 lines
2.4 KiB
YAML
- hosts: ise_servers
|
|
gather_facts: no
|
|
tasks:
|
|
|
|
# - name: Get active directory
|
|
# cisco.ise.active_directory_info:
|
|
# ise_hostname: "{{ise_hostname}}"
|
|
# ise_username: "{{ise_username}}"
|
|
# ise_password: "{{ise_password}}"
|
|
# ise_verify: "{{ise_verify}}"
|
|
# page: 1
|
|
# size: 1
|
|
# register: result
|
|
|
|
# - name: Print Active Directories
|
|
# ansible.builtin.debug:
|
|
# var: result
|
|
|
|
- name: Create or update active directory
|
|
cisco.ise.active_directory:
|
|
ise_hostname: "{{ise_hostname}}"
|
|
ise_username: "{{ise_username}}"
|
|
ise_password: "{{ise_password}}"
|
|
ise_verify: "{{ise_verify}}"
|
|
ise_debug: "{{ise_debug}}"
|
|
state: present
|
|
name: cisco.com
|
|
description: ''
|
|
domain: cisco.com
|
|
adgroups:
|
|
groups:
|
|
- name: cisco.com/operators
|
|
sid: S-1-5-32-548
|
|
type: GLOBAL
|
|
advancedSettings:
|
|
enablePassChange: true
|
|
enableMachineAuth: true
|
|
enableMachineAccess: true
|
|
agingTime: 5
|
|
enableDialinPermissionCheck: false
|
|
enableCallbackForDialinClient: false
|
|
plaintextAuth: false
|
|
identityNotInAdBehaviour: SEARCH_JOINED_FOREST
|
|
unreachableDomainsBehaviour: PROCEED
|
|
enableRewrites: false
|
|
rewriteRules:
|
|
- rowId: 0
|
|
rewriteMatch: host/[HOSTNAME].[DOMAIN]
|
|
rewriteResult: host/[HOSTNAME].[DOMAIN]
|
|
- rowId: 1
|
|
rewriteMatch: host/[HOSTNAME]
|
|
rewriteResult: host/[HOSTNAME]
|
|
- rowId: 2
|
|
rewriteMatch: "[DOMAIN]\\[IDENTITY]"
|
|
rewriteResult: "[DOMAIN]\\[IDENTITY]"
|
|
- rowId: 3
|
|
rewriteMatch: "[IDENTITY]@[DOMAIN]"
|
|
rewriteResult: "[IDENTITY]@[DOMAIN]"
|
|
- rowId: 4
|
|
rewriteMatch: "[IDENTITY]"
|
|
rewriteResult: "[IDENTITY]"
|
|
firstName: givenName
|
|
department: department
|
|
lastName: sn
|
|
organizationalUnit: company
|
|
jobTitle: title
|
|
locality: l
|
|
email: mail
|
|
stateOrProvince: st
|
|
telephone: telephoneNumber
|
|
country: co
|
|
streetAddress: streetAddress
|
|
schema: ACTIVE_DIRECTORY
|
|
adAttributes:
|
|
attributes:
|
|
- name: name1
|
|
type: STRING
|
|
defaultValue: defaultString
|
|
internalName: internalName1
|
|
adScopesNames: Default_Scope
|
|
register: result
|
|
|
|
- name: Print Active Directory
|
|
ansible.builtin.debug:
|
|
var: result |