topic Re: NSX-T Delete VIDM Configuration in VMware NSX Discussions

NSX-T Delete VIDM Configuration

chadc1979 — Mon, 30 Nov 2020 01:57:23 GMT

Hi, going through the NSX-T commands I don't see anything that clear the VIDM configuration.

After upgrading from 2.5 to 3.0 I decided to use LDAP instead of VIDM for authentication so I could get rid of VIDM and save some compute resources.

After disabling VIDM I see the configuration remains behind, I'd like to clear that, thanks.

Re: NSX-T Delete VIDM Configuration

shank89 — Tue, 01 Dec 2020 19:36:02 GMT

Hi,

So when navigating to nsx manager is it still redirecting you to vidm?

Re: NSX-T Delete VIDM Configuration

chadc1979 — Wed, 02 Dec 2020 15:29:22 GMT

No, I've disabled VIDM but the info stays. Wondering if that can be reset/cleared out as I deleted the VIDM VM.

Re: NSX-T Delete VIDM Configuration

shank89 — Fri, 04 Dec 2020 12:22:07 GMT

Hi,

Sure there are a couple of ways to do this, powercli and straight curl / api come to mind straight away.

If you use the code below it should wipe out your settings and revert it back to default.

curl --location --request PUT 'https://nsxmgr.shank.com/api/v1/node/aaa/providers/vidm' \ --header 'Authorization: Basic yourTokenHere' \ --header 'Content-Type: application/json' \ --header 'Cookie: JSESSIONID=D0EA6890719430A99D8044E85AEF1E10; JSESSIONID=6239026691FE848867AE2BC4830CB397' \ --data-raw '{ "client_id": "", "host_name": "", "lb_enable": false, "node_host_name": "", "thumbprint": "", "vidm_enable": false }'

Re: NSX-T Delete VIDM Configuration

Sreec — Sat, 05 Dec 2020 17:11:25 GMT

Delete the imported users
Disable VIDM
Delete all VIDM enteries

Above steps will clean up VIDM configuration .

Re: NSX-T Delete VIDM Configuration

shank89 — Sat, 05 Dec 2020 19:48:25 GMT

I don't think the ui will allow having nothing entered, which is why the user is having issues. The moment you try to delete the entry after disabling it you get a red asterisk.

At least from previous testing, I generally use API now as it's guaranteed to work.

Re: NSX-T Delete VIDM Configuration

shank89 — Sat, 05 Dec 2020 20:55:41 GMT

Re: NSX-T Delete VIDM Configuration

shank89 — Sat, 05 Dec 2020 21:02:39 GMT

For example, I have just readded vidm in my lab;

Check users, there is one.

Delete the user;

Disable VIDM;

Now go back in to delete the entries as you suggested;

Not allowed.

However, jump back into lets say postman and run the command I sent earlier;

All cleared up :).

Re: NSX-T Delete VIDM Configuration

Sreec — Sun, 06 Dec 2020 07:39:38 GMT

What version of NSX and VIDM is it ? I was able to delete the entries from GUI itself. Only when services are enabled those fields are mandatory . I have tested with NSX-T 3.1& VIDM 3.3.2.0

Re: NSX-T Delete VIDM Configuration

shank89 — Sun, 06 Dec 2020 07:59:42 GMT

Interesting.. NSX-T 3.1 and video 3.3.2 as well, from memory!

I imagine the OP is having the same issue as demonstrated, if so the api should definitely work.

There may be another underlying cause for us not being able to do it via the gui, if it is a known bug or not may have to be investigate:)

Re: NSX-T Delete VIDM Configuration

chadc1979 — Thu, 10 Dec 2020 04:27:38 GMT

I tried the curl command but the configuration seems to just repopulate after a minute or so, it's a 3 node cluster with a VIP. I tried running the command on each node and the VIP with no luck.

Re: NSX-T Delete VIDM Configuration

chadc1979 — Thu, 10 Dec 2020 04:29:11 GMT

I'm using VIDM 3.3.2 and NSX 3.0.2, maybe time to upgrade to 3.1?

Re: NSX-T Delete VIDM Configuration

shank89 — Thu, 10 Dec 2020 04:44:11 GMT

That's very weird, haven't seen that behaviour! Based on what you said tried it on the primary manager as well.

Re: NSX-T Delete VIDM Configuration

chadc1979 — Thu, 10 Dec 2020 05:29:24 GMT

Yes I tried it on the master node, the other 2 nodes and the cluster IP.

Re: NSX-T Delete VIDM Configuration

shank89 — Thu, 10 Dec 2020 05:37:47 GMT

I'll test again shortly and report back.

Re: NSX-T Delete VIDM Configuration

chadc1979 — Fri, 11 Dec 2020 06:23:19 GMT

Any luck duplicating what I’m seeing?

Re: NSX-T Delete VIDM Configuration

shank89 — Fri, 11 Dec 2020 06:49:20 GMT

Yup, same behaviour in 3.1 on a 3 node cluster. Just trying to work it out and also see if it is a bug.

Re: NSX-T Delete VIDM Configuration

shank89 — Sat, 12 Dec 2020 02:22:40 GMT

Ok, so this is more than likely a bug, I am raising a PR for it :).

Re: NSX-T Delete VIDM Configuration

chadc1979 — Sun, 13 Dec 2020 16:54:10 GMT

Thanks for testing, little cosmetic bug for all those OCD folks that can’t stand seeing something that no longer exists lol

Re: NSX-T Delete VIDM Configuration

shank89 — Sun, 13 Dec 2020 19:35:00 GMT

Yup, that's me lol.