utm_proxy_auth_profile – create, update or destroy reverse_proxy auth_profile entry in Sophos UTM

New in version 2.8.

Synopsis

  • Create, update or destroy a reverse_proxy auth_profile entry in SOPHOS UTM.

  • This module needs to have the REST Ability of the UTM to be activated.

Parameters

Parameter Choices/Defaults Comments
aaa
- / required
List of references to utm_aaa objects (allowed users or groups)
backend_mode
-
    Choices:
  • Basic
  • None ←
Specifies if the backend server needs authentication ([Basic|None])
backend_strip_basic_auth
boolean
    Choices:
  • no
  • yes ←
Should the login data be stripped when proxying the request to the backend host
backend_user_prefix
-
Default:
""
Prefix string to prepend to the username for backend authentication
backend_user_suffix
-
Default:
""
Suffix string to append to the username for backend authentication
basic_prompt
- / required
The message in the basic authentication prompt
comment
-
Default:
""
Optional comment string
frontend_cookie
-
Frontend cookie name
frontend_cookie_secret
-
Frontend cookie secret
frontend_form
-
Frontend authentication form name
frontend_form_template
-
Default:
""
Frontend authentication form template
frontend_login
-
Frontend login name
frontend_logout
-
Frontend logout name
frontend_mode
-
    Choices:
  • Basic ←
  • Form
Frontend authentication mode (Form|Basic)
frontend_realm
-
Frontend authentication realm
frontend_session_allow_persistency
boolean
    Choices:
  • no ←
  • yes
Allow session persistency
frontend_session_lifetime
- / required
session lifetime
frontend_session_lifetime_limited
boolean
    Choices:
  • no
  • yes ←
Specifies if limitation of session lifetime is active
frontend_session_lifetime_scope
-
    Choices:
  • days
  • hours ←
  • minutes
scope for frontend_session_lifetime (days|hours|minutes)
frontend_session_timeout
- / required
session timeout
frontend_session_timeout_enabled
boolean
    Choices:
  • no
  • yes ←
Specifies if session timeout is active
frontend_session_timeout_scope
-
    Choices:
  • days
  • hours
  • minutes ←
scope for frontend_session_timeout (days|hours|minutes)
headers
dictionary
A dictionary of additional headers to be sent to POST and PUT requests.
Is needed for some modules
logout_delegation_urls
-
Default:
[]
List of logout URLs that logouts are delegated to
logout_mode
-
    Choices:
  • None ←
  • Delegation
Mode of logout (None|Delegation)
name
- / required
The name of the object. Will be used to identify the entry
redirect_to_requested_url
boolean
    Choices:
  • no ←
  • yes
Should a redirect to the requested URL be made
state
string
    Choices:
  • absent
  • present ←
The desired state of the object.
present will create or update an object
absent will delete an object if it was present
utm_host
string / required
The REST Endpoint of the Sophos UTM.
utm_port
integer
Default:
4444
The port of the REST interface.
utm_protocol
string
    Choices:
  • http
  • https ←
The protocol of the REST Endpoint.
utm_token
string / required
validate_certs
boolean
    Choices:
  • no
  • yes ←
Whether the REST interface's ssl certificate should be verified or not.

Examples

- name: Create UTM proxy_auth_profile
  utm_proxy_auth_profile:
    utm_host: sophos.host.name
    utm_token: abcdefghijklmno1234
    name: TestAuthProfileEntry
    aaa: [REF_OBJECT_STRING,REF_ANOTHEROBJECT_STRING]
    basic_prompt: "Authentication required: Please login"
    frontend_session_lifetime: 1
    frontend_session_timeout: 1
    state: present

- name: Remove UTM proxy_auth_profile
  utm_proxy_auth_profile:
    utm_host: sophos.host.name
    utm_token: abcdefghijklmno1234
    name: TestAuthProfileEntry
    state: absent

- name: Read UTM proxy_auth_profile
  utm_proxy_auth_profile:
    utm_host: sophos.host.name
    utm_token: abcdefghijklmno1234
    name: TestAuthProfileEntry
    state: info

Return Values

Common return values are documented here, the following are the fields unique to this module:

Key Returned Description
result
complex
success
The utm object that was created
 
_locked
boolean
Whether or not the object is currently locked
 
_ref
string
The reference name of the object
 
_type
string
The type of the object
 
aaa
list
List of references to utm_aaa objects (allowed users or groups)
 
backend_mode
string
Specifies if the backend server needs authentication ([Basic|None])
 
backend_strip_basic_auth
boolean
Should the login data be stripped when proxying the request to the backend host
 
backend_user_prefix
string
Prefix string to prepend to the username for backend authentication
 
backend_user_suffix
string
Suffix string to append to the username for backend authentication
 
basic_prompt
string
The message in the basic authentication prompt
 
comment
string
Optional comment string
  frontend_cookie
string
Frontend cookie name
  frontend_cookie_secret
string
Frontend cookie secret
 
frontend_form
string
Frontend authentication form name
 
frontend_form_template
string
Frontend authentication form template
 
frontend_login
string
Frontend login name
 
frontend_logout
string
Frontend logout name
 
frontend_mode
string
Frontend authentication mode (Form|Basic)
 
frontend_realm
string
Frontend authentication realm
 
frontend_session_allow_persistency
boolean
Allow session persistency
 
frontend_session_lifetime
integer
session lifetime
 
frontend_session_lifetime_limited
boolean
Specifies if limitation of session lifetime is active
 
frontend_session_lifetime_scope
string
scope for frontend_session_lifetime (days|hours|minutes)
 
frontend_session_timeout
integer
session timeout
 
frontend_session_timeout_enabled
boolean
Specifies if session timeout is active
 
frontend_session_timeout_scope
string
scope for frontend_session_timeout (days|hours|minutes)
 
logout_delegation_urls
list
List of logout URLs that logouts are delegated to
 
logout_mode
string
Mode of logout (None|Delegation)
 
name
string
The name of the object
 
redirect_to_requested_url
boolean
Should a redirect to the requested URL be made


Status

Authors

  • Stephan Schwarz (@stearz)

Hint

If you notice any issues in this documentation, you can edit this document to improve it.