Query api with user reader

Reply
Highlighted

Query api with user reader

Hi, I have created some curl plugins to access via xml api to our Pa-500 and make queries. For that right now I use the admin user to get the id: https: //X.X.X.X/api/? type = keygen & user = admin & password = password The problem that I see that this is very insecure because the key is in the plugin and with it could change the configuration. I tried to create a reader user with the role (superadmin read only and device administrator read only). But both give me error when running the plugin. it tells me I do not have access. My plugins what they do is make monitor / threat / data filtering / system queries, etc. Can someone guide me how to do it safely and why do not read-only high stick users work? Version pa-500 is 7.1.6 Thank you
L2 Linker

Re: Query api with user reader

Super user (read only) should work for API calls. Can you share your curl script after sanitizing the passwords.

 

You can always use curl -k  to ignore the cert issues. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!