invalid 'ipasudoopt': Only one value is allowed #25863

auth-day · 2017-06-19T10:45:53Z

ISSUE TYPE

Bug Report

COMPONENT NAME

ipa

ANSIBLE VERSION

2.3.1.0

CONFIGURATION

OS / ENVIRONMENT

SUMMARY

When I add option

sudoopt:
    - '!authenticate'

it says:

TASK [ipa_sudorule] ********************************************************************************************************************************************************************
fatal: [10.200.3.155]: FAILED! => {"changed": false, "failed": true, "msg": "repsonse sudorule_add_option: invalid 'ipasudoopt': Only one value is allowed"}

STEPS TO REPRODUCE

  - ipa_sudorule:
      name: "{{ hostname }}"
      description: "Sudo rule for {{ hostname }}"
      sudoopt:
      - '!authenticate'
      cmdcategory: all
      state: present
      hostgroup:
        - "{{ hostname }}"
      usergroup:
        - "{{ hostname }}-admins"
        - "{{ hostname }}-admins-ext"
        - admins
      ipa_host: *
      ipa_user: *
      ipa_pass: *

EXPECTED RESULTS

ACTUAL RESULTS

the same error

The text was updated successfully, but these errors were encountered:

alikins · 2017-06-19T19:11:10Z

Could you run this example with 'ansible-playbook -vvvv' and post the results?

auth-day · 2017-06-19T20:16:03Z

Hello! Yes, please


TASK [ipa_sudorule] *************************************************************************************************************************************************************************************************************************
task path: /home/diman/ansible/ipa_client_enrollment.yml:53
Using module file /usr/lib/python2.7/dist-packages/ansible/modules/identity/ipa/ipa_sudorule.py
<192.168.1.5> ESTABLISH SSH CONNECTION FOR USER: admin
<192.168.1.5> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=admin -o ConnectTimeout=10 -o ControlPath=/home/diman/.ansible/cp/650f4a573d 10.201.3.174 '/bin/sh -c '"'"'echo ~ && sleep 0'"'"''
<192.168.1.5> (0, '/home/admin\n', '')
<192.168.1.5> ESTABLISH SSH CONNECTION FOR USER: admin
<192.168.1.5> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=admin -o ConnectTimeout=10 -o ControlPath=/home/diman/.ansible/cp/650f4a573d 10.201.3.174 '/bin/sh -c '"'"'( umask 77 && mkdir -p "` echo /home/admin/.ansible/tmp/ansible-tmp-1497901941.43-260694439487946 `" && echo ansible-tmp-1497901941.43-260694439487946="` echo /home/admin/.ansible/tmp/ansible-tmp-1497901941.43-260694439487946 `" ) && sleep 0'"'"''
<192.168.1.5> (0, 'ansible-tmp-1497901941.43-260694439487946=/home/admin/.ansible/tmp/ansible-tmp-1497901941.43-260694439487946\n', '')
<192.168.1.5> PUT /tmp/tmpL6NoKN TO /home/admin/.ansible/tmp/ansible-tmp-1497901941.43-260694439487946/ipa_sudorule.py
<192.168.1.5> SSH: EXEC sftp -b - -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=admin -o ConnectTimeout=10 -o ControlPath=/home/diman/.ansible/cp/650f4a573d '[192.168.1.5]'
<192.168.1.5> (0, 'sftp> put /tmp/tmpL6NoKN /home/admin/.ansible/tmp/ansible-tmp-1497901941.43-260694439487946/ipa_sudorule.py\n', '')
<192.168.1.5> ESTABLISH SSH CONNECTION FOR USER: admin
<192.168.1.5> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=admin -o ConnectTimeout=10 -o ControlPath=/home/diman/.ansible/cp/650f4a573d 10.201.3.174 '/bin/sh -c '"'"'chmod u+x /home/admin/.ansible/tmp/ansible-tmp-1497901941.43-260694439487946/ /home/admin/.ansible/tmp/ansible-tmp-1497901941.43-260694439487946/ipa_sudorule.py && sleep 0'"'"''
<192.168.1.5> (0, '', '')
<192.168.1.5> ESTABLISH SSH CONNECTION FOR USER: admin
<192.168.1.5> SSH: EXEC ssh -C -o ControlMaster=auto -o ControlPersist=60s -o KbdInteractiveAuthentication=no -o PreferredAuthentications=gssapi-with-mic,gssapi-keyex,hostbased,publickey -o PasswordAuthentication=no -o User=admin -o ConnectTimeout=10 -o ControlPath=/home/diman/.ansible/cp/650f4a573d -tt 10.201.3.174 '/bin/sh -c '"'"'/usr/bin/python /home/admin/.ansible/tmp/ansible-tmp-1497901941.43-260694439487946/ipa_sudorule.py; rm -rf "/home/admin/.ansible/tmp/ansible-tmp-1497901941.43-260694439487946/" > /dev/null 2>&1 && sleep 0'"'"''
<192.168.1.5> (0, '\r\n{"msg": "repsonse sudorule_add_option: invalid \'ipasudoopt\': Only one value is allowed", "failed": true, "invocation": {"module_args": {"ipa_port": 443, "cn": "vm-rhel70", "usercategory": null, "user": null, "cmd": null, "ipa_prot": "https", "host": null, "hostgroup": ["vm-rhel70"], "name": "vm-rhel70", "sudoopt": ["!authenticate"], "hostcategory": null, "state": "present", "ipa_host": "ipa-server-name", "ipa_user": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER", "usergroup": ["vm-rhel70-admins", "vm-rhel70-admins-ext", "admins"], "ipa_pass": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER", "cmdcategory": "all", "validate_certs": true, "description": "Sudo rule from vm-rhel70"}}}\r\n', 'Shared connection to 192.168.1.5 closed.\r\n')
fatal: [192.168.1.5]: FAILED! => {
    "changed": false,
    "failed": true,
    "invocation": {
        "module_args": {
            "cmd": null,
            "cmdcategory": "all",
            "cn": "vm-rhel70",
            "description": "Sudo rule from vm-rhel70",
            "host": null,
            "hostcategory": null,
            "hostgroup": [
                "vm-rhel70"
            ],
            "ipa_host": "ipa-server-name",
            "ipa_pass": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
            "ipa_port": 443,
            "ipa_prot": "https",
            "ipa_user": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
            "name": "vm-rhel70",
            "state": "present",
            "sudoopt": [
                "!authenticate"
            ],
            "user": null,
            "usercategory": null,
            "usergroup": [
                "vm-rhel70-admins",
                "vm-rhel70-admins-ext",
                "admins"
            ],
            "validate_certs": true
        }
    },
    "msg": "repsonse sudorule_add_option: invalid 'ipasudoopt': Only one value is allowed"

Nosmoht · 2017-06-30T11:31:25Z

I'll check that

auth-day · 2017-06-30T11:33:27Z

It would be great! Thanks!

Nosmoht · 2017-06-30T12:35:00Z

PR #26285 open.

Akasurde · 2017-09-24T12:23:46Z

@diboanches Could you please check with #26285 and let us know if it works for you ?

Akasurde · 2017-09-24T12:25:29Z

resolved_by_pr #26285

Akasurde · 2017-09-27T09:22:39Z

Can someone close this issue as PR is merged ?

auth-day · 2017-10-17T12:24:27Z

Hi! Sorry for delays! Thanks a lot everyone!

ansibot added affects_2.3 This issue/PR affects Ansible v2.3 bug_report c:module_utils/ needs_triage Needs a first human triage before being processed. labels Jun 19, 2017

alikins added needs_info This issue requires further information. Please answer any outstanding questions. and removed needs_triage Needs a first human triage before being processed. labels Jun 19, 2017

ansibot removed the needs_info This issue requires further information. Please answer any outstanding questions. label Jun 19, 2017

ansibot added the support:core This issue/PR relates to code supported by the Ansible Engineering Team. label Jun 29, 2017

Nosmoht pushed a commit to Nosmoht/ansible that referenced this issue Jun 30, 2017

ipa_sudorule: Fix issue ansible#25863

9ebe605

Nosmoht mentioned this issue Jun 30, 2017

ipa_sudorule: Fix issue #25863 #26285

Merged

ansibot pushed a commit that referenced this issue Sep 27, 2017

ipa_sudorule: Fix issue #25863 (#26285)

adc8d60

prasadkatti pushed a commit to prasadkatti/ansible that referenced this issue Oct 1, 2017

ipa_sudorule: Fix issue ansible#25863 (ansible#26285)

0674de3

BondAnthony pushed a commit to BondAnthony/ansible that referenced this issue Oct 5, 2017

ipa_sudorule: Fix issue ansible#25863 (ansible#26285)

4c5cb73

auth-day closed this as completed Oct 17, 2017

ansibot added bug This issue/PR relates to a bug. and removed bug_report labels Mar 7, 2018

dagwieers added the ipa IPA community label Feb 8, 2019

ansible locked and limited conversation to collaborators Apr 26, 2019

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

invalid 'ipasudoopt': Only one value is allowed #25863

invalid 'ipasudoopt': Only one value is allowed #25863

auth-day commented Jun 19, 2017 •

edited

alikins commented Jun 19, 2017

auth-day commented Jun 19, 2017 •

edited

Nosmoht commented Jun 30, 2017

auth-day commented Jun 30, 2017

Nosmoht commented Jun 30, 2017

Akasurde commented Sep 24, 2017

Akasurde commented Sep 24, 2017

Akasurde commented Sep 27, 2017

auth-day commented Oct 17, 2017

invalid 'ipasudoopt': Only one value is allowed #25863

invalid 'ipasudoopt': Only one value is allowed #25863

Comments

auth-day commented Jun 19, 2017 • edited

ISSUE TYPE

COMPONENT NAME

ANSIBLE VERSION

CONFIGURATION

OS / ENVIRONMENT

SUMMARY

STEPS TO REPRODUCE

EXPECTED RESULTS

ACTUAL RESULTS

alikins commented Jun 19, 2017

auth-day commented Jun 19, 2017 • edited

Nosmoht commented Jun 30, 2017

auth-day commented Jun 30, 2017

Nosmoht commented Jun 30, 2017

Akasurde commented Sep 24, 2017

Akasurde commented Sep 24, 2017

Akasurde commented Sep 27, 2017

auth-day commented Oct 17, 2017

auth-day commented Jun 19, 2017 •

edited

auth-day commented Jun 19, 2017 •

edited