na_ontap_user playbook issue. | NetApp | Page 1

strange kayak Mar 17, 2025, 4:43 PM

#

Hello. Module returns error:
Cannot modify attributes for user "diag". The only operations supported are "lock," "unlock," and "password".', 'code': '5832712'

    netapp.ontap.na_ontap_user:
    state: present
    name: "diag"
    application_dicts:
      - application: console
        authentication_methods: password
    role_name: "admin"
    vserver: "{{ inventory_hostname }}"
    set_password: "{{ diag_pass }}"
    lock_user: true
    username: "{{ hardening_user }}"
    password: "{{ hardening_pass }}"
    hostname: "{{ cluster_ip }}"
    https: false
    validate_certs: false

Ansible version = 2.10.14
netapp Lib version = 22.9.0
ONTAP version - 9.15.1P3

distant bane Mar 17, 2025, 5:45 PM

#

did you try doing only one of the two changes that you want to do? i.e. only lock_user: true or only set_password: {{ diag_pass }} instead of doing both at once?

strange kayak Mar 17, 2025, 5:48 PM

#

Nope. It was working for last years. It may be related to new ontap version.
I'll try.

tropic spruce Mar 18, 2025, 2:47 PM

#

strange kayak Hello. Module returns error: Cannot modify attributes for user \"diag\". The onl...

hi @strange kayak
Could you enable REST API tracing and share /tmp/ontap_apis.log content that shows the calls being sent to REST and the responses/errors received?

GitHub

Debugging

Ansible collection to support NetApp ONTAP configuration. - ansible-collections/netapp.ontap

strange kayak Mar 19, 2025, 9:45 PM

#

📎 ontap_api.log

#

Playbook works for 9.8P21 and doesn't work on 9.15.1P2.

In case separate changes to two different tasks:

set_password - 9.8 works , 9.15 fails with the same error
lock_user: true - 9.8 works, 9.15 fails with the same error

{"changed": false, "msg": "Error while modifying user details: {'message': 'Cannot modify attributes for user "diag". The only operations supported are "lock," "unlock," and "password".', 'code': '5832712'}"}

#na_ontap_user playbook issue.