NSX-T Delete VIDM Configuration

[chadc1979]

Hi, going through the NSX-T commands I don't see anything that clear the VIDM configuration.

After upgrading from 2.5 to 3.0 I decided to use LDAP instead of VIDM for authentication so I could get rid of VIDM and save some compute resources.

After disabling VIDM I see the configuration remains behind, I'd like to clear that, thanks.

[shank89]

Hi, 

So when navigating to nsx manager is it still redirecting you to vidm?

[chadc1979]

No, I've disabled VIDM but the info stays. Wondering if that can be reset/cleared out as I deleted the VIDM VM.

[shank89]

Hi,

Sure there are a couple of ways to do this, powercli and straight curl / api come to mind straight away.

If you use the code below it should wipe out your settings and revert it back to default.

curl --location --request PUT 'https://nsxmgr.shank.com/api/v1/node/aaa/providers/vidm' \
--header 'Authorization: Basic yourTokenHere' \
--header 'Content-Type: application/json' \
--header 'Cookie: JSESSIONID=D0EA6890719430A99D8044E85AEF1E10; JSESSIONID=6239026691FE848867AE2BC4830CB397' \
--data-raw '{
    "client_id": "",
    "host_name": "",
    "lb_enable": false,
    "node_host_name": "",
    "thumbprint": "",
    "vidm_enable": false
}'

[Sreec]

• Delete the imported users
• Disable VIDM
• Delete all VIDM enteries 

Above steps will clean up VIDM configuration .  

[shank89]

Spoiler

I don't think the ui will allow having nothing entered,  which is why the user is having issues.  The moment you try to delete the entry after disabling it you get a red asterisk. 

At least from previous testing, I generally use API now as it's guaranteed to work.

[shank89]

I don't think the ui will allow having nothing entered,  which is why the user is having issues.  The moment you try to delete the entry after disabling it you get a red asterisk. 

At least from previous testing, I generally use API now as it's guaranteed to work.

[shank89]

For example, I have just readded vidm in my lab;

Check users, there is one.

Delete the user;

Disable VIDM;

Now go back in to delete the entries as you suggested;

Not allowed.

However, jump back into lets say postman and run the command I sent earlier;

All cleared up :).

[Sreec]

What version of NSX and  VIDM is it ? I was able to delete the entries from GUI itself. Only when services are enabled those fields are mandatory . I have tested with NSX-T 3.1& VIDM 3.3.2.0 

[shank89]

Interesting.. NSX-T 3.1 and video 3.3.2 as well, from memory!

I imagine the OP is having the same issue as demonstrated, if so the api should definitely work.

There may be another underlying cause for us not being able to do it via the gui, if it is a known bug or not may have to be investigate:)

[chadc1979]

I tried the curl command but the configuration seems to just repopulate after a minute or so, it's a 3 node cluster with a VIP. I tried running the command on each node and the VIP with no luck.

[chadc1979]

I'm using VIDM 3.3.2 and NSX 3.0.2, maybe time to upgrade to 3.1?

[shank89]

That's very weird, haven't seen that behaviour! Based on what you said tried it on the primary manager as well.

[chadc1979]

Yes I tried it on the master node, the other 2 nodes and the cluster IP.

[shank89]

I'll test again shortly and report back.

[chadc1979]

Any luck duplicating what I’m seeing?

[shank89]

Yup, same behaviour in 3.1 on a 3 node cluster.  Just trying to work it out and also see if it is a bug.

[shank89]

Ok, so this is more than likely a bug, I am raising a PR for it :).

[chadc1979]

Thanks for testing, little cosmetic bug for all those OCD folks that can’t stand seeing something that no longer exists lol

[shank89]

Yup, that's me lol.