Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Clearpass API subscriber data

This thread has been viewed 1 times

  • 1.  Clearpass API subscriber data

    Posted Jan 30, 2020 04:35 AM

    Hi!

     

    Im trying to run a python script to check the eventlog on our clearpass servers.

     

    Using this for auth:

    https://github.com/aruba/clearpass-api-python-snippets/blob/master/clearpass-api-auth/clearpassauth.py

     

    Now running the API works fine but it only returns events on the publisher node (specified fqdn in params.cfg). How do I query data from the subsciber nodes ?

    I tried changing fqdn in the query, and I tried chaning fqdn in the params-file.

     

    I always get:

    403 Client Error: Forbidden for url



  • 2.  RE: Clearpass API subscriber data

    MVP GURU
    Posted Feb 03, 2020 03:29 AM

    Do you have create also a client API on sub ?



  • 3.  RE: Clearpass API subscriber data

    EMPLOYEE
    Posted Feb 03, 2020 04:37 AM

    Hi 

     

    API Client can be only created on Publisher since its having the Database read/write access.

     

    This looks permission issue to me, Try changing the operator profile to Super administrator and check.

     

    Or else please work with Aruba TAC for Faster resolution.  

     

     



  • 4.  RE: Clearpass API subscriber data

    Posted Feb 06, 2020 03:03 AM

    I've already tried changing to super admin, makes no difference.



  • 5.  RE: Clearpass API subscriber data

    EMPLOYEE
    Posted Feb 06, 2020 05:46 AM

    Hi,

     

    Could you please recheck the Parameter file or share here if possible. 

     

    Also try doing HTTP get individually for the URLS and let me know the results for both publisher and susbcriber. 

     

    • url = "https://" + clearpass_fqdn + "/api/oauth/privileges"
    • url = "https://" + clearpass_fqdn + "/api/oauth/me

    with content type and Authorization Token.

     

     

     

     

     

     



  • 6.  RE: Clearpass API subscriber data

    Posted Feb 10, 2020 02:10 AM

    Hi,

     

    Every subscriber maintains a local database called "tipsLogDb" in which you can query for local data such as events and requests.

     

    If using the https API is not a strong requirement, you could go the postgresql way.

     

    Regards,



  • 7.  RE: Clearpass API subscriber data

    EMPLOYEE
    Posted Feb 10, 2020 03:39 AM

    Hi,

     

    Yes, Correct "TipsLogDb" (Server event and session logs) and "AppPlatform" (licensing logs) are individual server specific.