Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

CPPM REST API question：status 403，"detail": "Access denied"

This thread has been viewed 17 times

  • 1.  CPPM REST API question：status 403，"detail": "Access denied"

    Posted Jul 13, 2018 02:59 AM

    cppm version is 6.6.8. I test the REST API step by step from the document "ClearPass REST APIs.pdf".  In the lab, I can get the bearer code, and test the privileges API success.

    curl -X GET "https://172.16.6.137/api/oauth/privileges" \

    -H "Accept: application/json" \

    -H "Authorization: Bearer 99be2c41d05f6bda5b6011d7d23baa83d5fa1bc6" \

    -m 30 \

    -v \

    -k

    return：status：200.

     

    But I try to test API for query some MAC in endpoint, it's wrong.

     

    curl -X GET "https://172.16.6.137:443/api/endpoint/mac-address/005056a24df1" \

    -H "Authorization: Bearer 99be2c41d05f6bda5b6011d7d23baa83d5fa1bc6" \

    -m 30 \

    -v \

    -k

     

    return:

    {
  "type": "http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html",
  "title": "Forbidden",
  "status": 403,
  "detail": "Access denied"
}

    What's the problem? Somebody can help me?



  • 2.  RE: CPPM REST API question：status 403，"detail": "Access denied"

    EMPLOYEE
    Posted Jul 13, 2018 03:01 AM
    The operator profile doesn't have the correct permissions.


  • 3.  RE: CPPM REST API question：status 403，"detail": "Access denied"

    Posted Jul 13, 2018 03:12 AM

    I use the operator IT Administrators profile , it also wrong.



  • 4.  RE: CPPM REST API question：status 403，"detail": "Access denied"
    Best Answer

    EMPLOYEE
    Posted Jul 13, 2018 03:14 AM
    Test with super administrator and see if it works.


  • 5.  RE: CPPM REST API question：status 403，"detail": "Access denied"

    Posted Jul 13, 2018 03:36 AM

    yes, successful. I find the wrong: the role of my local user is different from the operator role.

     

     

    THANK YOU!!!

    Request URL

    https://172.16.6.137:443/api/insight/endpoint/mac/111111111111

    Response Body

    {
  "mac": "111111111111",
  "ip": "",
  "user": "test",
  "domain": "",
  "roles": null,
  "spt": "UNKNOWN",
  "device_category": "",
  "device_family": "",
  "device_name": "",
  "is_online": false,
  "updated_at": "2018-07-12T18:57:19+08:00"
}

    Response Code

    200


  • 6.  RE: CPPM REST API question：status 403，"detail": "Access denied"

    Posted Aug 03, 2018 01:48 AM

    Hi,

     

    I am using CP 6.6.7.

    When i am trying to connect with the API i receive a error 403 (using default API Guest Operator)
    When i am using the Super Administrator profile it is working.

     

    Does someone has a suggestion?