Need a little help with PAN::API on Linux

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Need a little help with PAN::API on Linux

Not applicable

I just installed the User-ID API PAN::API system on my Linux server to pass wireless syslog information to a Palo Alto User-ID Agent.  The problem is the User-ID Agent does see the connection from Linux, but does not post the passed user logon data.  The test Perl script is very small;

#!/usr/bin/perl
use strict;

use warnings;

use diagnostics;

use PAN::API;

my $uid = PAN::API::UID->new('10.1x.2xx.1xx');

$uid->add('logon','DOMAIN\somename', '10.7x.3x.1xx');

$uid->submit();

print "Done\n";

Now the User-ID Agent log shows the connection, but no passed data;

05/25/12  11:46:34  |  Info     | New xml api connection 10.1x.2xx.1xx : 57990: -2068154446

05/25/12  11:46:34  |  Info     | XML api thread 0 from 10.1x.2xx.1xx : 57990 is started.

05/25/12  11:46:34  |  Debug | Event: type="XML API connection" name=" 10.1x.2xx.1xx" status="Connected"

05/25/12  11:46:34  |  Debug | Device thread 0 send server status 10.1x.2xx.1xx : 57990 Connected (XML API)

05/25/12  11:46:34  |  Info     | XML api thread 0 accept finished

05/25/12  11:46:34  |  Debug | XML api thread 0 SSL no certificate

05/25/12  11:46:34  |  Debug | Event: type="XML API connection" name="10.1x.2xx.1xx" status="Disconnected"

05/25/12  11:46:34  |  Debug | XML api thread 0 exists

05/25/12  11:46:34  |  Info     | XML api connection 10.1x.2xx.1xx : 57990 closed.

05/25/12  11:46:34  |  Debug | All XML api connection stopped!

05/25/12  11:46:34  |  Debug | Device thread 0 send server status 10.1x.2xx.1xx : 57990 Disconnected (XML API)

The Perl program throws no errors and everything ~looks~ fine.

I was wondering how one would go about troubleshooting thi issue.

Thanks in advance.

1 REPLY 1

Not applicable

Hi,

there is a mistake in your script:

you write "logon" instead of "login"

you can use :

$class->login($username,$ipaddress);

or

$class->add($eventtype,$username,$ipaddress);


the event type can be login or logout, in this doc:

I think there is a mistake. try to use ->login() and ->logout() function instead.

regards

  • 1960 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!