"Delete mapping failed" from XML API / uid-message / logout

le.wang — Tue, 01 Jun 2021 13:15:53 GMT

We send IP to userid mapping data to Palo Alto via the XML api. We've had success with PAN-OS 5.0. However, with Palo Alto 8(8.1.0) we recieve "Delete mapping failed" messages when we attempt to notify Palo Alto an user has left the network (logout).

Is there a new requirement or configuration on Palo Alto 8 or is there something wrong in the request message?

Example request:

<uid-message>

<type>update</type>

</logout>

</payload>

</uid-message>

Response:

</logout>

</payload>

</uid-response>

</line></msg></response>

IP user info on Paloalto server:

> show user ip-user-mapping-mp ip 10.65.69.147

IP address: 10.65.69.147 (vsys1)
User: wangle
From: XMLAPI
Timeout: 2580s
Created: 120s ago

Thanks,

Le Wang

Re: "Delete mapping failed" from XML API / uid-message / logout

JimmyHolland — Wed, 09 Jun 2021 11:48:14 GMT

Hio @le.wang, in your example, the current User-ID entry is for username "wangle" per "show user ip-user-mapping-mp ip 10.65.69.147". But, your API call is trying to remove/logout username "11:22:33:aa:bb:cc". Is that the problem?

topic "Delete mapping failed" from XML API / uid-message / logout in Automation/API Discussions

"Delete mapping failed" from XML API / uid-message / logout

Re: "Delete mapping failed" from XML API / uid-message / logout