chadc1979
Enthusiast
Enthusiast

NSX-T Delete VIDM Configuration

Hi, going through the NSX-T commands I don't see anything that clear the VIDM configuration.

After upgrading from 2.5 to 3.0 I decided to use LDAP instead of VIDM for authentication so I could get rid of VIDM and save some compute resources.

After disabling VIDM I see the configuration remains behind, I'd like to clear that, thanks.

0 Kudos
19 Replies
shank89
Expert
Expert

Hi, 

So when navigating to nsx manager is it still redirecting you to vidm?

Shashank Mohan

VCAP-NV 2020 | VCP-DCV2019 | CCNP Specialist

https://lab2prod.com.au
0 Kudos
chadc1979
Enthusiast
Enthusiast

No, I've disabled VIDM but the info stays. Wondering if that can be reset/cleared out as I deleted the VIDM VM.

NSX.png

0 Kudos
shank89
Expert
Expert

Hi,

Sure there are a couple of ways to do this, powercli and straight curl / api come to mind straight away.

If you use the code below it should wipe out your settings and revert it back to default.

 

 

curl --location --request PUT 'https://nsxmgr.shank.com/api/v1/node/aaa/providers/vidm' \
--header 'Authorization: Basic yourTokenHere' \
--header 'Content-Type: application/json' \
--header 'Cookie: JSESSIONID=D0EA6890719430A99D8044E85AEF1E10; JSESSIONID=6239026691FE848867AE2BC4830CB397' \
--data-raw '{
    "client_id": "",
    "host_name": "",
    "lb_enable": false,
    "node_host_name": "",
    "thumbprint": "",
    "vidm_enable": false
}'

 

Shashank Mohan

VCAP-NV 2020 | VCP-DCV2019 | CCNP Specialist

https://lab2prod.com.au
0 Kudos
Sreec
VMware Employee
VMware Employee

  • Delete the imported users
  • Disable VIDM
  • Delete all VIDM enteries 

Above steps will clean up VIDM configuration .  

 

Cheers,
Sree | CKA|CKAD|VCIX-3X| VCAP-4X| VExpert 5x
0 Kudos
shank89
Expert
Expert

Spoiler
I don't think the ui will allow having nothing entered,  which is why the user is having issues.  The moment you try to delete the entry after disabling it you get a red asterisk. 

At least from previous testing, I generally use API now as it's guaranteed to work.
Shashank Mohan

VCAP-NV 2020 | VCP-DCV2019 | CCNP Specialist

https://lab2prod.com.au
0 Kudos
shank89
Expert
Expert

I don't think the ui will allow having nothing entered,  which is why the user is having issues.  The moment you try to delete the entry after disabling it you get a red asterisk. 

At least from previous testing, I generally use API now as it's guaranteed to work.

Shashank Mohan

VCAP-NV 2020 | VCP-DCV2019 | CCNP Specialist

https://lab2prod.com.au
0 Kudos
shank89
Expert
Expert

For example, I have just readded vidm in my lab;

shank89_0-1607201818476.png

Check users, there is one.

shank89_1-1607201867745.png

Delete the user;

shank89_2-1607201901477.png

Disable VIDM;

shank89_3-1607201962868.png

Now go back in to delete the entries as you suggested;

shank89_4-1607202008543.png

Not allowed.

 

However, jump back into lets say postman and run the command I sent earlier;

shank89_5-1607202112979.png

shank89_6-1607202144128.png

 

All cleared up :).

 

 

 

Shashank Mohan

VCAP-NV 2020 | VCP-DCV2019 | CCNP Specialist

https://lab2prod.com.au
0 Kudos
Sreec
VMware Employee
VMware Employee

What version of NSX and  VIDM is it ? I was able to delete the entries from GUI itself. Only when services are enabled those fields are mandatory . I have tested with NSX-T 3.1& VIDM 3.3.2.0 

Cheers,
Sree | CKA|CKAD|VCIX-3X| VCAP-4X| VExpert 5x
0 Kudos
shank89
Expert
Expert

Interesting.. NSX-T 3.1 and video 3.3.2 as well, from memory!

 

I imagine the OP is having the same issue as demonstrated, if so the api should definitely work.

There may be another underlying cause for us not being able to do it via the gui, if it is a known bug or not may have to be investigate:)

Shashank Mohan

VCAP-NV 2020 | VCP-DCV2019 | CCNP Specialist

https://lab2prod.com.au
0 Kudos
chadc1979
Enthusiast
Enthusiast

I tried the curl command but the configuration seems to just repopulate after a minute or so, it's a 3 node cluster with a VIP. I tried running the command on each node and the VIP with no luck.

0 Kudos
chadc1979
Enthusiast
Enthusiast

I'm using VIDM 3.3.2 and NSX 3.0.2, maybe time to upgrade to 3.1?

0 Kudos
shank89
Expert
Expert

That's very weird, haven't seen that behaviour! Based on what you said tried it on the primary manager as well.

Shashank Mohan

VCAP-NV 2020 | VCP-DCV2019 | CCNP Specialist

https://lab2prod.com.au
0 Kudos
chadc1979
Enthusiast
Enthusiast

Yes I tried it on the master node, the other 2 nodes and the cluster IP.

0 Kudos
shank89
Expert
Expert

I'll test again shortly and report back.

Shashank Mohan

VCAP-NV 2020 | VCP-DCV2019 | CCNP Specialist

https://lab2prod.com.au
0 Kudos
chadc1979
Enthusiast
Enthusiast

Any luck duplicating what I’m seeing?

0 Kudos
shank89
Expert
Expert

Yup, same behaviour in 3.1 on a 3 node cluster.  Just trying to work it out and also see if it is a bug.

Shashank Mohan

VCAP-NV 2020 | VCP-DCV2019 | CCNP Specialist

https://lab2prod.com.au
0 Kudos
shank89
Expert
Expert

Ok, so this is more than likely a bug, I am raising a PR for it :).

Shashank Mohan

VCAP-NV 2020 | VCP-DCV2019 | CCNP Specialist

https://lab2prod.com.au
chadc1979
Enthusiast
Enthusiast

Thanks for testing, little cosmetic bug for all those OCD folks that can’t stand seeing something that no longer exists lol

0 Kudos
shank89
Expert
Expert

Yup, that's me lol. 

Shashank Mohan

VCAP-NV 2020 | VCP-DCV2019 | CCNP Specialist

https://lab2prod.com.au
0 Kudos