Need a little help with PAN::API on Linux

EdCricket — Thu, 24 May 2012 18:03:26 GMT

I just installed the User-ID API PAN::API system on my Linux server to pass wireless syslog information to a Palo Alto User-ID Agent. The problem is the User-ID Agent does see the connection from Linux, but does not post the passed user logon data. The test Perl script is very small;

#!/usr/bin/perl
use strict;

use warnings;

use diagnostics;

use PAN::API;

my $uid = PAN::API::UID->new('10.1x.2xx.1xx');

$uid->add('logon','DOMAIN\somename', '10.7x.3x.1xx');

$uid->submit();

print "Done\n";

Now the User-ID Agent log shows the connection, but no passed data;

05/25/12 11:46:34 | Info | New xml api connection 10.1x.2xx.1xx : 57990: -2068154446

05/25/12 11:46:34 | Info | XML api thread 0 from 10.1x.2xx.1xx : 57990 is started.

05/25/12 11:46:34 | Debug | Event: type="XML API connection" name=" 10.1x.2xx.1xx" status="Connected"

05/25/12 11:46:34 | Debug | Device thread 0 send server status 10.1x.2xx.1xx : 57990 Connected (XML API)

05/25/12 11:46:34 | Info | XML api thread 0 accept finished

05/25/12 11:46:34 | Debug | XML api thread 0 SSL no certificate

05/25/12 11:46:34 | Debug | Event: type="XML API connection" name="10.1x.2xx.1xx" status="Disconnected"

05/25/12 11:46:34 | Debug | XML api thread 0 exists

05/25/12 11:46:34 | Info | XML api connection 10.1x.2xx.1xx : 57990 closed.

05/25/12 11:46:34 | Debug | All XML api connection stopped!

05/25/12 11:46:34 | Debug | Device thread 0 send server status 10.1x.2xx.1xx : 57990 Disconnected (XML API)

The Perl program throws no errors and everything ~looks~ fine.

I was wondering how one would go about troubleshooting thi issue.

Thanks in advance.

Re: Need a little help with PAN::API on Linux

cviaud — Wed, 14 Nov 2012 13:28:46 GMT

Hi,

there is a mistake in your script:

you write "logon" instead of "login"

you can use :

$class->login($username,$ipaddress);

$class->add($eventtype,$username,$ipaddress);

the event type can be login or logout, in this doc:

I think there is a mistake. try to use ->login() and ->logout() function instead.

regards

topic Need a little help with PAN::API on Linux in Automation/API Discussions

Need a little help with PAN::API on Linux

Re: Need a little help with PAN::API on Linux