topic Re: Totally stuck getting started. Constant 403 responses in Automation/API Discussions

Totally stuck getting started. Constant 403 responses

IamTheGorf — Tue, 30 Jan 2018 19:27:54 GMT

Howdy all. I'm trying to get started with some API work on my PAN instances in AWS. I walked through the Getting Started guide for 8.0 and I created a user, assigned an Admin Profile to it that had API access, and then generated a key. Seems pretty simple but no matter what I do, every request is coming back 403:

curl -k 'https://w.x.y.z//api/?type=op&cmd=<show><system><info></info></system></show>&key=LUFRPT0zTG5aOUEvbFlCT09ROUZhVHZUZ3BUWFNoVGc9YnBIeDlmNHE5OUVoMHlhTDgwaTlmOWdNQTNpZ05xL0N6UU5LR0RGMzFsQT0'
<response status = 'error' code = '403'><result><msg>Invalid credentials.</msg></result></response>

I've changed the password, I've recreated the user, i've redone the key after password changes. Nothing works. I have to be missing something simple. Can anyone provide me some guidance? I can't even figure out how to get to logfiles that would provide any debug output about why the user is getting rejected.

Re: Totally stuck getting started. Constant 403 responses

nigelswift — Tue, 30 Jan 2018 19:39:19 GMT

I'll try to recreate this on one of our AWS instances. The only thing that comes to mind beforehand is to make sure the API key generation was successful. Sometimes a special character is at the end of the API key and I've notice when I select the text in my browser it misses the special character.

Re: Totally stuck getting started. Constant 403 responses

IamTheGorf — Tue, 30 Jan 2018 19:44:35 GMT

OMG!!! You are a f'in genius! I have stared at this thing for 2 days and never even noticed the character at the end that my copy and paste wasn't picking up.

Re: Totally stuck getting started. Constant 403 responses

nigelswift — Tue, 30 Jan 2018 19:46:51 GMT

Glad it was an easy one, though it's definitely something that has stumped me before. 🙂

Re: Totally stuck getting started. Constant 403 responses

Sergey.Ivashkin-PL — Thu, 01 Feb 2018 14:58:28 GMT

Hello,

can you help me, what I am doing wrong?

curl -k 'https://firewall/api/?type=keygen&user=xmladmin&password=password'
<response status = 'success'><result><key>LUFRPT1tajdzYWdOL2wrcDR0ckNIb0hNR2N2Wnc0VTg9M053bFoyTngydmpWUFhPOGttTWd0Q21EN1lyYngreWFXVktGc2F3MjNHQT0=</key></result></response>
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────

➤ curl -k 'https://firewall/api/?type=op&cmd=<show><system><info></info></system></show>&api=LUFRPT1tajdzYWdOL2wrcDR0ckNIb0hNR2N2Wnc0VTg9M053bFoyTngydmpWUFhPOGttTWd0Q21EN1lyYngreWFXVktGc2F3MjNHQT0='
<response status = 'error' code = '403'><result><msg>Invalid credentials.</msg></result></response>

Thank you in advance

Re: Totally stuck getting started. Constant 403 responses

nigelswift — Thu, 01 Feb 2018 18:36:05 GMT

The name of the API key parameter is key, not api. So change the part preceding your key with &key= instead of &api=

Re: Totally stuck getting started. Constant 403 responses

Sergey.Ivashkin-PL — Mon, 05 Feb 2018 12:19:40 GMT

silly me!

I was looking for mistake in any other places,

thank you!

Re: Totally stuck getting started. Constant 403 responses

ISRARAHMEDANSARI — Wed, 09 Aug 2023 08:15:07 GMT

Ran into same error and I resolved it by typing the password manually.