CheckPointAnsibleGAIACollection icon indicating copy to clipboard operation
CheckPointAnsibleGAIACollection copied to clipboard

Module: cp_gaia_password_policy.py does not allow to input "never" as str for password_expiration_days

Open asgeb opened this issue 2 years ago • 1 comments

Hi Guys

Nice work with this Collection

Is it possible to add option to add string "never" for: password_expiration_days and password_expiration_maximum_days_before_lock to allow to revert to default config?

Like this:

password-expiration-days # Password expiration lifetime, default value is 'never'

integer: Valid values are 60-604800

or

string: Optional arguments: never

The same goes for password_expiration_maximum_days_before_lock

asgeb avatar Oct 20 '23 10:10 asgeb

Hey asgeb,

I'm not part of the Check Point R&D team, just a Check Point partner.

For things like this, you'd likely have to open a TAC case and request a fix. Several Gaia API Ansible modules have problems with inconsistent values between the Ansible modules and Gaia API server, just like what you noted. The issue is that the modules are defined to accept only integers instead of text strings. They'd have to parse every optional parameter value like this one to detect the optional string. It's doable, but it'd be tedious to go back and fix all of them. I agree with you; they should do this. The API accepts the optional string so the Ansible module should be consistent with the API.

duanetoler avatar Apr 12 '24 16:04 duanetoler

will be supported in next release

chkp-majds avatar Jan 02 '25 08:01 chkp-majds