topic Re: Dynamic Objects Error in General Topics

Dynamic Objects Error

rds — Fri, 04 Oct 2013 11:10:43 GMT

I’m trying to test using dynamic objects on 5.0 however I’m not sure If I’m missing something?

The document suggests the syntax to add a new entry do a dynamic address object is as follows:

https://<IP>/api/?type=user-id&action=set&key=<KEY>=&file-name=<XMLFILE>

Where IP is the IP address of the firewall under management, KEY is the pre-generated key for the PAN-OS firewall and XMLFILE is the name of the XML file with the needed additions and/or deletions for the dynamic address object.

I’ve generated the key by creating a dedicated admin account.

But what I’m not sure about is the <XMLFILE>? Do I need to upload a file or do I reference a file somehow?

I get the following error when I run the command just using a generic file name eg. dynobj.xml:

<msg>No file uploaded</msg>

</result>

</response>

Re: Dynamic Objects Error

ukhapre — Sat, 05 Oct 2013 00:20:08 GMT

There is similar issue resolved in 5.0.8.

Please refer to release notes at https://downloads.paloaltonetworks.com/software/PAN-OS-5.0.8-RN-revA.PDF?__gda__=1380975467_35d69ebda945f9eb038e88d5db1c…

Re: Dynamic Objects Error

apasupulati — Mon, 07 Oct 2013 02:43:22 GMT

Hello,

I've only seen this done through cli tools, using the filename in the URL does a GET request, instead you need to do a POST to submit data to the resource. Have you tried using curl or wget to import the file?

example:

curl --form file=@userdata.xml

"http://<firewall>/api/?type=user-id&action=set&key=XXXXXX"

Your response should be -

<msg>

<line>userdata.xml saved</line>

</msg>

</response>

FYI: there is a known bug on files could not be uploaded to the firewall using CURL with the XML API was fixed in 5.0.4.

Refer to page 17 & 18 of the following article for the input file format:

https://live.paloaltonetworks.com/docs/DOC-4126

Hope that helps!

Aditi