community.general icon indicating copy to clipboard operation
community.general copied to clipboard

RFE: Add 802.1X parameters to `nmcli`

Open sstagnaro opened this issue 3 years ago • 6 comments

Summary

The nmcli module is lacking support for 802.1X authentication. One is forced to use the non-idempotent command like in this example:

- name: Create connection with 802.1X
  command: >
    nmcli connection add type ethernet
    802-1x.eap peap 802-1x.identity [email protected]
    802-1x.password mypwd12345 802-1x.phase2-auth mschapv2

Please add all the relevant parameters for NetworkManager 802-1x section.

Issue Type

Feature Idea

Component Name

nmcli

Additional Information

No response

Code of Conduct

  • [X] I agree to follow the Ansible Code of Conduct

sstagnaro avatar Jun 11 '21 10:06 sstagnaro

Files identified in the description:

If these files are inaccurate, please update the component name section of the description or use the !component bot command.

click here for bot help

ansibullbot avatar Jun 11 '21 10:06 ansibullbot

cc @alcamie101 @nerzhul click here for bot help

ansibullbot avatar Jun 11 '21 10:06 ansibullbot

Files identified in the description:

If these files are incorrect, please update the component name section of the description or use the !component bot command.

click here for bot help

ansibullbot avatar Nov 11 '22 01:11 ansibullbot

I would like this feature too... I am struggling with 802-1x options.

drobnymichal avatar Mar 31 '24 10:03 drobnymichal

I agree that this is an important feature for anyone wanting to use this in a company environment.

This is how I help myself at the moment, which is not ideal:

ansible.builtin.command: >
  nmcli connection modify '{{ item.conn_name }}'
  +802-1x.ca-cert '{{ item.802-1x.ca-cert }}'
  +802-1x.client-cert '{{ item.802-1x.client-cert }}'
  +802-1x.domain-suffix-match '{{ item.802-1x.domain-suffix }}'
  +802-1x.eap '{{ item.802-1x.eap }}'
  +802-1x.identity '{{ item.802-1x.identity }}'
  +802-1x.private-key '{{ item.802-1x.private-key }}'
  +802-1x.private-key-password '{{ item.802-1x.private-key-password }}'
changed_when: false

c-erb avatar Apr 03 '24 07:04 c-erb

@c-erb I agree...

drobnymichal avatar Apr 03 '24 16:04 drobnymichal