Wireless Access

 View Only
last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

ArubaOS 8.7.1.1 Mobility Controller XML-API issue

This thread has been viewed 10 times

  • 1.  ArubaOS 8.7.1.1 Mobility Controller XML-API issue

    Posted Feb 23, 2021 12:34 AM
    Hello,

    I am trying to use XML-API to integrate our external captive portal and I found an odd behavior.
    When I send message that should generate an error in response I am getting anyway OK.
    For example

    xml=<aruba command="user_authenticate">
    <ipaddr>127.0.0.1</ipaddr>
    <version>1.0</version>
    <key>123123</key>
    <authentication>cleartext</authentication>
    </aruba>

    Response:

    <aruba>
    <status>Ok</status>
    <code>0</code>
    </aruba>

    In controller log i see the correct error
    Feb 22 22:27:32, authmgr[3792]: <124030> <3792> <INFO> |authmgr| Received XML API cmd=user_authenticate, agent=192.168.1.110 IP=127.0.0.1
    Feb 22 22:27:32, authmgr[3792]: <124004> <3792> <DBUG> |authmgr| IP=127.0.0.1, MAC=00:00:00:00:00:00, name=''
    Feb 22 22:27:32, authmgr[3792]: <124004> <3792> <DBUG> |authmgr| auth='cleartext', role='', tout=0, vers='1.0'
    Feb 22 22:27:32, authmgr[3792]: <199802> <3792> <ERRS> |authmgr| ecp.c, ecp_api:357: ecp_api: validate_client failed for mac 00:00:00:00:00:00 ip 127.0.0.1
    Feb 22 22:27:32, authmgr[3792]: <124827> <3792> <WARN> |authmgr| XML command=user_authenticate (0) from agent 192.168.1.110 IP=127.0.0.1 result=Error, error=''

    Any idea why is it?

    Thanks

    ------------------------------
    Alexander Shulgin
    ------------------------------


  • 2.  RE: ArubaOS 8.7.1.1 Mobility Controller XML-API issue

    MVP
    Posted Feb 24, 2021 07:16 AM
    Open a TAC case. i had a similar issue a while ago with the API and aaa-test-server and it was a bug.

    I do not believe many customers use the APIs but I use the ClearPass API quite a bit.

    ------------------------------
    Bruce Osborne
    ------------------------------

    Original Message