Current File : //lib/python2.7/site-packages/salt/states/nxos.pyo
�
���^c @@ sz d Z d d l m Z m Z m Z d d l Z d � Z d d e d d d � Z d � Z
d � Z d � Z e d
� Z
d S( u�
State module for Cisco NX OS Switches Proxy minions
.. versionadded: 2016.11.0
For documentation on setting up the nxos proxy minion look in the documentation
for :mod:`salt.proxy.nxos<salt.proxy.nxos>`.
i ( t absolute_importt print_functiont unicode_literalsNc C@ s
d t k S( Nu nxos.cmd( t __salt__( ( ( s4 /usr/lib/python2.7/site-packages/salt/states/nxos.pyt __virtual__ s u sha256c C@ s� i | d 6t d 6i d 6d d 6} t } | d" k rZ t d d d | d | d
| � } n t } | d" k r� t d d d | �} t | � t | � k } n t d d d | �}
t | | |
g � s� t | d <d
| d <| S| t k r t | � t | � } t | � t | � } n t d t k r�d" | d <|
s�d | d <| d" k rct | d d <n | d" k r�i | d 6g d 6| d d <n | S| t k r�d | d <t | d d <n | t k r�d | d <i t | � d 6t | � d 6| d d <n | S| t k rmt d d d | d | d
| d | r9| d n d" d | d | �}
i |
d 6|
d 6| d d <n | t k r�x( | D] } t d d d | d | �q�Wx( | D] } t d d d | d | �q�Wi t d d d | �d 6| d 6| d d <n t } | d" k r5t d d d | d | d
| �} n t } | d" k rxt d d d | �} t | � t | � k } n | s�d | d <n' | s�d | d <n d! | d <t | d <| S(# u�
Ensure a user is present with the specified groups
name
Name of user
password
Encrypted or Plain Text password for user
roles
List of roles the user should be assigned. Any roles not in this list will be removed
encrypted
Whether the password is encrypted already or not. Defaults to False
crypt_salt
Salt to use when encrypting the password. Default is None (salt is
randomly generated for unhashed passwords)
algorithm
Algorithm to use for hashing password. Defaults to sha256.
Accepts md5, blowfish, sha256, sha512
.. note: sha512 may make the hash too long to save in NX OS which limits the has to 64 characters
Examples:
.. code-block:: yaml
create:
nxos.user_present:
- name: daniel
- roles:
- vdc-admin
set_password:
nxos.user_present:
- name: daniel
- password: admin
- roles:
- network-admin
update:
nxos.user_present:
- name: daniel
- password: AiN9jaoP
- roles:
- network-admin
- vdc-admin
u nameu resultu changesu u commentu nxos.cmdu check_passwordt usernamet passwordt encryptedu get_rolesu get_useru User already existsu testu User will be createdu passwordu addu removeu roleu User will be updatedu rolesu set_passwordt rolei t
crypt_saltt algorithmu newu oldu set_roleu
unset_roleu Failed to set correct rolesu Failed to set correct passwordu User set correctlyN( t Falset NoneR t sett anyt Truet __opts__t list( t nameR t rolesR R R
t rett change_passwordt change_rolest cur_rolest old_usert remove_rolest add_rolest new_userR t correct_passwordt
correct_roles( ( s4 /usr/lib/python2.7/site-packages/salt/states/nxos.pyt user_present s� 4
c C@ s i | d 6t d 6i d 6d d 6} t d d d | �} | sV t | d <d | d <| St d
t k r� | r� d | d <d | d <| | d d <d | d d
<| St d d d | �t d d d | �r� d | d <n0 t | d <d | d <| | d d <d | d d
<| S( u�
Ensure a user is not present
name
username to remove if it exists
Examples:
.. code-block:: yaml
delete:
nxos.user_absent:
- name: daniel
u nameu resultu changesu u commentu nxos.cmdu get_userR u User does not existu testu User will be removedu oldu newu remove_useru Failed to remove useru User removedN( R R R R R ( R R R ( ( s4 /usr/lib/python2.7/site-packages/salt/states/nxos.pyt user_absent� s.
c C@ s� i | d 6t d 6i d 6d d 6} t d d | � } | rR t | d <d | d <n� t d t k r� d | d <d
| d <| | d d <nc t d d | � t d d | � } | r� t | d <d
| d <| | d d <n t | d <d | d <| S( ut
Ensure a specific configuration line exists in the running config
name
config line to set
Examples:
.. code-block:: yaml
add snmp group:
nxos.config_present:
- names:
- snmp-server community randoSNMPstringHERE group network-operator
- snmp-server community AnotherRandomSNMPSTring group network-admin
add snmp acl:
nxos.config_present:
- names:
- snmp-server community randoSNMPstringHERE use-acl snmp-acl-ro
- snmp-server community AnotherRandomSNMPSTring use-acl snmp-acl-rw
u nameu resultu changesu u commentu nxos.cmdu findu Config is already setu testu Config will be addedu newu
add_configu Successfully added configu Failed to add configN( R R R R R ( R R t matches( ( s4 /usr/lib/python2.7/site-packages/salt/states/nxos.pyt config_present� s*
c C@ s� i | d 6t d 6i d 6d d 6} t d d | � } | sR t | d <d | d <n� t d t k r� d | d <d
| d <| | d d <nc t d d | � t d d | � } | s� t | d <d
| d <| | d d <n t | d <d | d <| S( u�
Ensure a specific configuration line does not exist in the running config
name
config line to remove
Examples:
.. code-block:: yaml
add snmp group:
nxos.config_absent:
- names:
- snmp-server community randoSNMPstringHERE group network-operator
- snmp-server community AnotherRandomSNMPSTring group network-admin
.. note::
For certain cases extra lines could be removed based on dependencies.
In this example, included after the example for config_present, the
ACLs would be removed because they depend on the existence of the
group.
u nameu resultu changesu u commentu nxos.cmdu findu Config is already absentu testu Config will be removedu newu
delete_configu Successfully deleted configu Failed to delete configN( R R R R R ( R R R ( ( s4 /usr/lib/python2.7/site-packages/salt/states/nxos.pyt
config_absent s*
c C@ sZ i | d 6t d 6i d 6d d 6} | t k r@ d j | � } n | } t d d | � } | sw t | d <d | d <| St d
t k r� d | d <d | d <| | d d <g | D] } t j | | | � ^ q� | d d
<| St d d | | d | �| d <t d d | � } | r6t | d <d j | � | d <n t | d <d j | | � | d <| S( uU
Replace all instances of a string or full line in the running config
name
String to replace
repl
The replacement text
full_match
Whether `name` will match the full line or only a subset of the line.
Defaults to False. When False, .* is added around `name` for matching
in the `show run` config.
Examples:
.. code-block:: yaml
replace snmp string:
nxos.replace:
- name: randoSNMPstringHERE
- repl: NEWrandoSNMPstringHERE
replace full snmp string:
nxos.replace:
- name: ^snmp-server community randoSNMPstringHERE group network-operator$
- repl: snmp-server community NEWrandoSNMPstringHERE group network-operator
- full_match: True
.. note::
The first example will replace the SNMP string on both the group and
the ACL, so you will not lose the ACL setting. Because the second is
an exact match of the line, when the group is removed, the ACL is
removed, but not readded, because it was not matched.
u nameu resultu changesu u commentu ^.*{0}.*$u nxos.cmdu findu Nothing found to replaceu testu Configs will be changedu oldu newu replacet
full_matchu( Failed to replace all instances of "{0}"u7 Successfully replaced all instances of "{0}" with "{1}"N( R t formatR R R R t ret sub( R t replR# R t searchR t match( ( s4 /usr/lib/python2.7/site-packages/salt/states/nxos.pyt replace< s4 %
0
( t __doc__t
__future__R R R R% R R R R R R! R" R* ( ( ( s4 /usr/lib/python2.7/site-packages/salt/states/nxos.pyt <module> s � / 5 6
Mini Shell