topic Re: Remote backup issue in General Topics

Remote backup issue

ManuShankar — Mon, 07 Sep 2020 10:44:00 GMT

I am trying to backup the config from a remote backup server. The backup file is generating but no config showing in the file. Instead when I open the xml file, I can see this " <?xml version="1.0"?> -<response code="403" status="error"> -<result> <msg>Type [export] not authorized for user role.</msg> "

The steps I did is;

I took the API key using the command - https://<IP Address>/api/?type=keygen&user=<username>&password=<password>

I am running the below command from a linux OS;

curl -kG --tlsv1.2 "https://IP Address/api/?type=export&category=configuration&key=API KEY" > /home/sftpusers/home/sftponly/firewall_backups/running-config.xml

Re: Remote backup issue

Abdul-Fattah — Mon, 07 Sep 2020 11:44:16 GMT

the reason stated at the file output: "not authorized for user role".

admin role account should be able to export Config from firewall, admin account type should be "dynamic".

after changing the role backup should work.

Re: Remote backup issue

ManuShankar — Mon, 07 Sep 2020 12:50:49 GMT

This user has admin privileges. The authentication type is RSA with static password. When the user logins it will get assigned with Super User role. Please let me know if any specific config to be done.

Re: Remote backup issue

Abdul-Fattah — Mon, 07 Sep 2020 13:03:04 GMT

when you enter the Link "https://IP Address/api/?type=export&category=configuration&key=API KEY" in a brower " where access to the Firewall Management ist allowed" do you see the Firewall-config data?

Re: Remote backup issue

ManuShankar — Mon, 07 Sep 2020 14:10:39 GMT

No I am getting the below response.

<msg>Type [export] not authorized for user role.</msg>

</result>

</response>

Re: Remote backup issue

Abdul-Fattah — Mon, 07 Sep 2020 16:46:56 GMT

the Account simply does not have permission to export Configurations.

you need to create Admin-Account with role type "Dynamic" and Administrator Permission.

Then Generate API-Key with it.

Re: Remote backup issue

ManuShankar — Tue, 08 Sep 2020 04:24:56 GMT

I have created user called "backup" and type is "dynamic" and role "Superuser (read-only)"

But the actual backup user is "GS0C@backup". This user is defined in Radius.

Let me tell you the issue, I am able to login with GS0C@backup in GUI and I have full rights. But when I do an API call it says "not authorized"

Re: Remote backup issue

MarkDufault — Thu, 13 Jan 2022 17:09:58 GMT

Not sure if you ever got your answer, but I think it is related to the Admin Roles, then pick the profile and the tab for XML/Rest API and most likely give readonly to the configuration.