Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

how to query user-table via clear pass api v6.5

This thread has been viewed 1 times
  • 1.  how to query user-table via clear pass api v6.5

    Posted Oct 12, 2016 04:46 PM

    Via terminal, I am getting data from user-table with the following command.

    show user-table | include <mac-address>

     Clear pass API version is 6.5

    OS Version is 6.4

    But how can I get the same information via clear pass API?



  • 2.  RE: how to query user-table via clear pass api v6.5

    EMPLOYEE
    Posted Oct 12, 2016 05:54 PM

    ClearPass does not really know what is in the user table on a controller, and it does not keep that state...



  • 3.  RE: how to query user-table via clear pass api v6.5

    Posted Oct 14, 2016 05:43 PM

    Right now, via terminal I follow these steps to clear the session on the mobility controller.

     

    show user-table | include <mac address>

    i will confirm whether the mac address is present as guest-logon. And then I will be deleting the mac address with the following command:

     

    aaa user delete mac <mac address>

     

    I am looking for an API to do these steps instead of me manually doing it on the controller.

     

    Thank you!



  • 4.  RE: how to query user-table via clear pass api v6.5

    EMPLOYEE
    Posted Oct 14, 2016 05:47 PM


  • 5.  RE: how to query user-table via clear pass api v6.5

    Posted Oct 24, 2016 01:39 PM

    thank you..



  • 6.  RE: how to query user-table via clear pass api v6.5

    Posted Nov 02, 2016 02:12 PM

    Hi,

    I am using PHP for backend scripting. 

    I have formed the xml api request with the following xml:

     

            $xml='<aruba command="user_query">

                   <macaddr>xx:xx:xx:xx:xx:xx</macaddr>

                   <key>key which i have created while setting the controller for xml api</key>

                  <version>1.0</version>

                  </aruba>';

    And the curl request to get information fromthe controller are as follows:

     

           $curl = curl_init();

                           $url = "https://xx.xx.xx.xx/auth/command.xml";

                          // set URL and other appropriate options

                           curl_setopt($curl, CURLOPT_URL, $url);

                           curl_setopt($curl, CURLOPT_HTTPHEADER, array('Content-Type: application/xml','Authorization: Bearer key that i have generated while generating the xml api in controlller'));

                           curl_setopt($curl, CURLOPT_HEADER, 1);

                           curl_setopt($curl, CURLOPT_HTTPAUTH, CURLAUTH_ANY);

                           curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);

                           curl_setopt($curl, CURLOPT_RETURNTRANSFER, TRUE);

                           curl_setopt($curl, CURLOPT_FOLLOWLOCATION, TRUE);

                           // This sets the number of fields to post

                           curl_setopt($curl,CURLOPT_POST, sizeof($xml));

                           // This is the fields to post in the form of an array.

                           curl_setopt($curl,CURLOPT_POSTFIELDS, $xml);

     

                           //execute the post

                           $result = curl_exec($curl);

                           $info = curl_getinfo($curl);

                           curl_close($curl);

     

    but I am getting "504 Gateway Time-out" error. not sure where I am going wrong.

     

    can you please validate the xml and format of the xml api url pls?

     

    Thank you!



  • 7.  RE: how to query user-table via clear pass api v6.5