mirror of https://github.com/ansible/ansible.git
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
109 lines
2.3 KiB
YAML
109 lines
2.3 KiB
YAML
---
|
|
- block:
|
|
- name: Create user with password
|
|
ios_user:
|
|
name: auth_user
|
|
privilege: 15
|
|
role: network-operator
|
|
state: present
|
|
configured_password: pass123
|
|
|
|
- name: reset connection with {{ ansible_user }
|
|
meta: reset_connection
|
|
|
|
- name: test login for {{ ansible_user }} user with password
|
|
ios_command:
|
|
commands:
|
|
- show version
|
|
vars:
|
|
ansible_user: auth_user
|
|
ansible_password: pass123
|
|
|
|
- name: reset connection with {{ ansible_user }
|
|
meta: reset_connection
|
|
|
|
- name: test login with invalid password (should fail)
|
|
ios_command:
|
|
commands:
|
|
- show version
|
|
ignore_errors: yes
|
|
register: results
|
|
vars:
|
|
ansible_user: auth_user
|
|
ansible_password: badpass
|
|
|
|
- name: reset connection with {{ ansible_user }
|
|
meta: reset_connection
|
|
|
|
- name: check that attempt failed
|
|
assert:
|
|
that:
|
|
- results.failed
|
|
|
|
always:
|
|
- name: delete user
|
|
ios_user:
|
|
name: auth_user
|
|
state: absent
|
|
register: result
|
|
|
|
- name: reset connection
|
|
meta: reset_connection
|
|
|
|
|
|
- block:
|
|
- name: Ensure ssh key is not world readable
|
|
file:
|
|
path: "{{ role_path }}/files/test_rsa"
|
|
mode: 0600
|
|
|
|
- name: Create user with sshkey
|
|
ios_user:
|
|
name: ssh_user
|
|
privilege: 15
|
|
role: network-operator
|
|
state: present
|
|
sshkey: "{{ lookup('file', 'files/test_rsa.pub') }}"
|
|
|
|
- name: reset connection with {{ ansible_user }
|
|
meta: reset_connection
|
|
|
|
- name: test sshkey login for {{ ansible_user }} user
|
|
ios_command:
|
|
commands:
|
|
- show version
|
|
vars:
|
|
ansible_user: ssh_user
|
|
ansible_private_key_file: "{{ role_path }}/files/test_rsa"
|
|
|
|
- name: reset connection with {{ ansible_user }}
|
|
meta: reset_connection
|
|
|
|
- name: test with {{ ansible_user }} user without keys
|
|
ios_command:
|
|
commands:
|
|
- show version
|
|
ignore_errors: yes
|
|
register: results
|
|
vars:
|
|
ansible_user: ssh_user
|
|
ansible_private_key_file: ""
|
|
|
|
- name: reset connection with {{ ansible_user }}
|
|
meta: reset_connection
|
|
|
|
- name: check that attempt failed
|
|
assert:
|
|
that:
|
|
- results.failed
|
|
|
|
always:
|
|
- name: delete user
|
|
ios_user:
|
|
name: ssh_user
|
|
state: absent
|
|
register: result
|
|
|
|
- name: reset connection
|
|
meta: reset_connection
|