[pfsensible_openvpn_server] Allow Local Database for authmode f…

…ixes #125.
pfsensible · Apr 10, 2024 · 1af7547 · 1af7547
1 parent 5ada6e4
commit 1af7547
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 2 deletions.
diff --git a/changelogs/fragments/openvpn_localdb.yml b/changelogs/fragments/openvpn_localdb.yml
@@ -0,0 +1,2 @@
+minor_changes:
+  - 'pfsensible_openvpn_server - Allow ``Local Database`` for ``authmode`` parameter (https://github.com/pfsensible/core/issues/125).'
diff --git a/plugins/module_utils/openvpn_server.py b/plugins/module_utils/openvpn_server.py
@@ -213,7 +213,7 @@ def _validate_params(self):
         if len(params['authmode']) > 0:
             system = self.pfsense.get_element('system')
             for authsrv in params['authmode']:
-                if len(system.findall("authserver[name='{0}']".format(authsrv))) == 0:
+                if authsrv != 'Local Database' and len(system.findall("authserver[name='{0}']".format(authsrv))) == 0:
                     self.module.fail_json(msg='Cannot find authentication server {0}.'.format(authsrv))
 
         # validate key

diff --git a/plugins/modules/pfsense_openvpn_server.py b/plugins/modules/pfsense_openvpn_server.py
@@ -30,7 +30,9 @@
     choices: ["p2p_tls", "p2p_shared_key", "server_tls", "server_tls_user", "server_user"]
     type: str
   authmode:
-    description: Authentication servers. This list will be put into alphabetical order.  Required if mode == server_tls_user.
+    description:
+      - Authentication servers. This list will be put into alphabetical order.  Required if mode == server_tls_user.
+      - Use 'Local Database' for authentication against the local pfSense user database.
     default: []
     type: list
     elements: str