topic Re: Ansible : How to increase response from Verify-Policy command in Ansible

Ansible : How to increase response from Verify-Policy command

oakint — Thu, 25 Apr 2019 09:33:47 GMT

I am currently developing ansible for adding rule into checkpoint security management server. According to my company policy, the rule needs to be verified first and it will be implemented later at the scheduled time. However, when "verify-policy" command, following is the response i got.

management server : R80.20
api_version: 1.3

(with -vvvv optiong)

fatal: [test1]: FAILED! => {

"changed": false,

"invocation": {

"module_args": {

"api_version": null,

"command": "verify-policy",

"context": null,

"fingerprint": null,

"parameters": "{'policy-package': 'standard'}",

"session-data": "{'failed': False, 'changed': False, 'response': {'domain': None, 'url': '192.168.56.80:443', 'sid': 'KDnWv33ZQl6z-5ZAlb0kwjZLzZpqD2e3YL-D23sL4jk', 'context': 'web_api', 'fingerprint': '83F58C9B4FE00C1B12456A11AEA756E6A575B205', 'api_version': '1.3'}}"

}

"msg": "Command 'verify-policy {u'policy-package': u'standard'}' failed. All changes are discarded and the session is invalidated."

}

Is there anyway to increase the detail of the error response in msg part ?

Re: Ansible : How to increase response from Verify-Policy command

PhoneBoy — Thu, 25 Apr 2019 13:42:17 GMT

Try changing your API call so it's policy-package Standard (with a capital S) instead of a lower-case s.
Some API calls are case-sensitive.

Re: Ansible : How to increase response from Verify-Policy command

oakint — Thu, 25 Apr 2019 16:14:57 GMT

Dear Phoneboy

I have tried changing it to Standard but still same result.

fatal: [test1]: FAILED! => {

"changed": false,

"invocation": {

"module_args": {

"api_version": null,

"command": "verify-policy",

"context": "web_api",

"fingerprint": null,

"parameters": "{'policy-package': 'Standard'}",

"session-data": "{'failed': False, 'changed': False, 'response': {'domain': None, 'url': '192.168.56.80:443', 'sid': 's5Kkih3t-clPLX6VunY5QQ0dUniE4zt7r8F5c_rjeM4', 'context': 'web_api', 'fingerprint': '83F58C9B4FE00C1B12456A11AEA756E6A575B205', 'api_version': '1.3'}}"

}

"msg": "Command 'verify-policy {u'policy-package': u'Standard'}' failed. All changes are discarded and the session is invalidated."

}

Re: Ansible : How to increase response from Verify-Policy command

PhoneBoy — Thu, 25 Apr 2019 16:19:51 GMT

The full API call you're making might also provide a clue.
Same with the file(s) gathered by api status -s on the management.