Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Clearpass API can't reauthorize session

This thread has been viewed 17 times
  • 1.  Clearpass API can't reauthorize session

    Posted Apr 24, 2019 05:11 AM

    Hi,

     

    I have problemes with reauthorizing a Clearpass Session.

     

    When i try to receive the reauthorize profiles i get the following result:

    {
      "profiles": [
        "[H3C - Bounce Switch Port]",
        "[H3C - Disable Switch Port]"
      ]
    }

    When i try to reauthorize the session with the following (trying via API Explorer of Clearpass):

    id: 000000042019-04-24:08:58:42-0000753a161

    body: {
    "confirm_reauthorize": true, "reauthorize_profile": "[H3C - Bounce Switch Port]"
    }

     

    I receive the following response body:

    {
      "result": {
        "error": 1,
        "message": "Session reauth failed (0). Please check ClearPass Policy Manager > Monitoring > Live Monitoring > Access Tracker for more details"
      },
      "type": "http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html",
      "title": "Bad Request",
      "status": 400,
      "detail": "Error reauthorizing session for user <username>. Please check ClearPass Policy Manager > Monitoring > Live Monitoring > Access Tracker for more details."
    }

    Can somebody point me into the correct direction?

     



  • 2.  RE: Clearpass API can't reauthorize session

    EMPLOYEE
    Posted Apr 24, 2019 08:19 AM
    Does it work in the GUI?


  • 3.  RE: Clearpass API can't reauthorize session

    Posted Apr 24, 2019 08:20 AM

    This is the error is receive in the API Explorer (GUI)



  • 4.  RE: Clearpass API can't reauthorize session

    EMPLOYEE
    Posted Apr 24, 2019 08:22 AM
    Try in Policy Manager.


  • 5.  RE: Clearpass API can't reauthorize session

    Posted Apr 24, 2019 08:26 AM

    There i am able to perform the "Change Status" action (I already tried that). Sorry misunderstood your question.



  • 6.  RE: Clearpass API can't reauthorize session

    EMPLOYEE
    Posted Apr 24, 2019 08:29 AM
    What version of CPPM?


  • 7.  RE: Clearpass API can't reauthorize session

    Posted Apr 24, 2019 08:34 AM

    ClearPass Policy Manager 6.7.7.109065 on C3000 platform



  • 8.  RE: Clearpass API can't reauthorize session

    EMPLOYEE
    Posted Apr 26, 2019 11:05 AM

    The error message told you to 'Please check ClearPass Policy Manager > Monitoring > Live Monitoring > Access Tracker for more details.', but I do not see the results of that.  If the call failed there would be a longer trace of why.

     

    Separately, try the CoA from Guest>Active Sessions.  The API uses the same calls that does.



  • 9.  RE: Clearpass API can't reauthorize session

    Posted May 02, 2019 05:20 AM

     If the call failed there would be a longer trace of why >> Was the error i received. How can i recieve more information?

     

    Session is not displayed in the Guest Manager, but authentication is done by Clearpass.