41 Posts
0
666
Powerscale Ansible No Log - "*****" instead
Hi,
I'm trying to see the log entries for my Ansible Powerscale modules. However they are hidden behind ********.
Here is an example:
"name": "testte********m1",
"negative_cache_entry_expiry": 60,
"netbios_name": "",
"path": "/ifs/testte********m1",
"skeleton_directory": "/usr/sh********re/skel",
"system": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
"system_provider": "ls********-file-provider:System",
"user_mapping_rules": [],How do I fix this?
thanks.
glenn
jennifer_john
1 Rookie
1 Rookie
•
79 Posts
0
April 13th, 2023 11:00
Hi @gdny
The no_log is set as part of module code for the playbook parameters to mask sensitive data.
For all modules, password is set to no_log, and few other playbook parameters are set to no_log. And if the output has the matching string, it is masked by ansible.
In networkpool module, the password is set to no_log, it could be that the API output response has matching string as the password, which is why it is masking the data.
Could you try to execute the networkpool module with different password and let me know if you are able to view the output. We could take it over a webex if its not resolved.
Thanks,
Jennifer
jennifer_john
1 Rookie
1 Rookie
•
79 Posts
0
April 12th, 2023 23:00
Hi @gdny
Playbook parameters marked as no-log is replaced with ****. Ansible masks all occurrences in output that matches the nolog string with an asterisk.
Fix would be to consider changing the nolog parameter(eg: password) to some value that is not included in the return values from the API.
Please find the below github issues raised to ansible for similar issue for reference:
https://github.com/ansible/ansible/issues/68400
https://github.com/ansible/ansible/issues/76872
Thanks,
Jennifer
gdny
41 Posts
0
April 13th, 2023 06:00
Hi @jennifer_john
I'm sorry, but I don't understand your comment or the links that you provided.
I have not set no_log = True anywhere in my code, so not sure why I would need to change it.
Do you guys set it in your collection? And if so, why?
This makes it very difficult to debug.
If you do set it, wouldn't it be better to warn the user to set it themselves. Or even better, have an option to not show passwords.
If there is a way I can adjust this, I really need this. I do not have this problem with any other Modules other than the ones for Isilon.
I should add that there are no passwords in my output for NetworkPool, so not sure why this is even an issue.
thanks.
glenn.
gdny
41 Posts
0
April 13th, 2023 12:00
LOL. That's hilarious. I finally understand what you are saying and now understand what the problem is.
Because this is a test simulator that I'm running against, I'm guessing the Admin wanted to make the password easy so decided to set the password to a single character. And of course that character is in a lot of words. Hence it being hidden.
thanks for your help!!
glenn