401 Authentification error

[willifehler]

Hello there,

has anybody seen the error that the switch does ask for an authentification again?

An exception occurred during task execution. To see the full traceback, use -vvv. The error was: pyaoscx.exceptions.generic_op_error.GenericOperationError: 'GENERIC OPERATION ERROR: Unauthorized: Code: 401'

I'm using a loop to deploy interfaces. I've already increased the timeouts.

HTTPS Server Configuration
----------------------------
 VRF                     : mgmt

 REST Access Mode         : read-write

 Max sessions per user    : 8

 Session idle timeout     : 0

 Session absolute timeout : 480

My setup:

pyaoscx                2.6.0
arubanetworks.aoscx                      4.4.0
Python 3.12.7

Cheers - Willi

[alagoutte]

Hi Willi,

What switch model and firmware version ?

do you are using local account or RBAC ? (RADIUS, MGMT ?)

What do you have on the switch log ?

what do you make on the playbook ?

[willifehler]

Hi @alagoutte,

I'm using local accounts.

Vendor                 : Aruba
Product Name           : JL717C 8360-32Y4C v2 Switch
ArubaOS-CX Version     : LL.10.13.1040

sh logging

does not provide any hint. Shall I check another logfile?

My Playbook is quite simple, I'm configuring interfaces and lag interfaces.

Cheers - Willi

[alagoutte]

Do you have try with

debug rest all

[tchiapuziowong]

@willifehler how many interfaces are you configuring/looping through? Is there a certain amount of time that passes where this error occurs or is it random?

[willifehler]

Hi,

thank you so much for your feedback. The error occurs pretty random. Sometimes even Ansible just hang.

I will execute debug rest all to check if I can see something.

Cheers - Willi

[tchiapuziowong]

@willifehler also are you running on a single host or multiple hosts?

[willifehler]

I added the parameter: ansible_command_timeout. For now the issue didn't came up again. But I'm not sure if this command is really related to API requests.

[tchiapuziowong]

@willifehler can you confirm if you're using the aoscx_interface module? or share a snippet of the task? for ansible_command_timeout that's valid for both SSH and API connections, so it's valid that extending that could allow for additional time the Ansible control machine keeps the cookie and waits for a response from the switch - additionally I was curious if increasing the number of forks or parallel connections to devices would also improve your results