topic Re: Devices | Panorama | Add User (in API key section) issue in Expedition Discussions

Devices | Panorama | Add User (in API key section) issue

justamoment — Sat, 09 Oct 2021 23:11:02 GMT

Install details below, but I haven't used my Expedition install in a while and I went to start another migration, but the Panorama user I was using wasn't working. The account locked so I just changed the password to avoid any issues there (new password meets all complexity requirements as defined in Panorama | Setup | Management tab).

When I try to add it as an auth type username & password, I get an error:

Remote Exception

Please change your password.

I've changed it several times but it still throws that error.

Ubuntu 16.04

Expedition v1.1.68

Any ideas?

Thanks!

Re: Devices | Panorama | Add User (in API key section) issue

azuniga — Mon, 11 Oct 2021 15:20:16 GMT

Hello @justamoment

Go ahead and try upgrading your expedition client and see if you still have an issue. The current version is 1.1.113.

Re: Devices | Panorama | Add User (in API key section) issue

justamoment — Tue, 12 Oct 2021 02:56:01 GMT

Unfortunately, that didn't work - same error.

Re: Devices | Panorama | Add User (in API key section) issue

azuniga — Tue, 12 Oct 2021 15:58:32 GMT

Hello @justamoment

Can you share a screenshot of what you're seeing? This is coming from the expedition server? If for some reason the username/password isn't working you can always add in the API key but I would like to see the screenshot I think it will be helpful.

Re: Devices | Panorama | Add User (in API key section) issue

justamoment — Tue, 12 Oct 2021 16:13:48 GMT

Yes, on Expedition within the Panorama device, in the Authentication API Keys section where you add mt_user etc. as a user.

Re: Devices | Panorama | Add User (in API key section) issue

justamoment — Tue, 12 Oct 2021 16:14:38 GMT

Also, how would I get the API key?

Re: Devices | Panorama | Add User (in API key section) issue

azuniga — Tue, 12 Oct 2021 16:15:39 GMT

Hello @justamoment

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-panorama-api/get-started-with-the-pan-os-xml-api/get-your-api-key

Re: Devices | Panorama | Add User (in API key section) issue

justamoment — Tue, 12 Oct 2021 16:25:53 GMT

That failed (invalid credentials), however it then occurred to me to try to login to the GUI as mt_admin. So, all this time I had been changing the password (even deleting & re-creating the username in Panorama with commits in between). Well, I login to the GUI and it says I need to change the password (60-day expiry). Apparently, it was stuck as an expired account.

Thanks for all of your suggestions!

Re: Devices | Panorama | Add User (in API key section) issue

azuniga — Tue, 12 Oct 2021 16:27:11 GMT

Hello @justamoment

Thanks for the update and good luck on your migration!