summaryrefslogtreecommitdiff
path: root/test/integration/targets/nxos_aaa_server/tests/common/tacacs.yaml
blob: 9b540fc385cc74a18114d41efdeea4d3b32f65f5 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
---
- debug: msg="START connection={{ ansible_connection }} nxos_aaa_server tacacs.yaml sanity test"

- name: "Enable feature tacacs+"
  nxos_feature:
    feature: tacacs+
    state: enabled

- name: "Setup"
  nxos_aaa_server: &remove
    server_type: tacacs
    deadtime: default
    server_timeout: default
    directed_request: default
    state: default
  ignore_errors: yes

- block:
  - name: "Configure tacacs server defaults"
    nxos_aaa_server: &configure_default_tacacs
      server_type: tacacs
      state: present
    register: result

  - name: "Check Idempotence"
    nxos_aaa_server: *configure_default_tacacs
    register: result

  - assert: &false
      that:
        - "result.changed == false"

  - name: "Configure tacacs server non defaults"
    nxos_aaa_server: &configure_tacacs_non_default
      server_type: tacacs
      server_timeout: 9
      deadtime: 20
      directed_request: enabled
      state: present
    register: result
  
  - assert: &true
     that:
        - "result.changed == true"

  - name: "Check Idempotence"
    nxos_aaa_server: *configure_tacacs_non_default
    register: result

  - assert: *false

  - name: "Remove tacacs server configuration"
    nxos_aaa_server: *remove
    register: result

  - assert: *true

  - name: "Configure tacacs server with global key"
    nxos_aaa_server: &configure_tacacs_global_key
      server_type: tacacs
      encrypt_type: 7
      global_key: test_key
      state: present
    register: result
   
  - assert: *true

  - name: "Check Idempotence"
    nxos_aaa_server: *configure_tacacs_global_key
    register: result

  - assert: *false

  - name: "Remove tacacs server configuration"
    nxos_aaa_server: &tac_def
      server_type: tacacs
      deadtime: default
      server_timeout: default
      global_key: default
      directed_request: default
      state: default
    register: result

  - assert: *true

  - name: "Check Idempotence"
    nxos_aaa_server: *tac_def
    register: result

  - assert: *false

  rescue:

  - debug: msg="connection={{ ansible_connection }} nxos_aaa_server failure detected"

  always:

  - name: "Remove tacacs server configuration"
    nxos_aaa_server: *remove
    register: result

  - name: "Disable feature tacacs+"
    nxos_feature:
      feature: tacacs+
      state: disabled

- debug: msg="END connection={{ ansible_connection }} nxos_aaa_server tacacs.yaml sanity test"