panxapi -C fails with error on PanOS 4.1

[IsThisOneOkay]

panxapi -C used to work for me. Now that I've upgraded to 4.1 I get

commit: File does not exist: Illegal value for parameter "action" [commit]. Should be one of : [clone, complete, delete, edit, get, rename, set, show]. at /usr/lib/perl5/site_perl/5.8.8/PAN/XAPI.pm line 230

Can anyone point me to a solution?

[ksomu]

which panxapi build  are you using ? I just did a small test and it looks fine in my environment.

ksomu@ksomu-VirtualBox:~/pan/PAN-perl-20111226/bin$ panxapi -l admin:admin -h 10.2.133.15 -CD
commit: success: Commit job enqueued with jobid 78

admin@PA-5060-1> show jobs id 78

Enqueued                     ID             Type    Status Result Completed
--------------------------------------------------------------------------
2012/01/17 15:27:35          78           Commit       FIN     OK 15:28:00

Configuration committed successfully

I am using the latest perl package built on dec 26th of 2011.  panos version is 4.1.1

thanks,
krishna Somu

[IsThisOneOkay]

https://live.paloaltonetworks.com/docs/DOC-2485

[bart.wallace]

I'm using 4.1.3 and PAN-perl-20111226.tgz and getting a similar result...

/usr/local/bin/panxapi -h 192.168.x.x -K asdfasdfasdasdfasdasdf -CD

.

.

.

$VAR1 = {
  action => 'commit',
  type => 'config',
  key => 'asdfasdfasdfasdfasdfasdfasdf'
};

API response:
<response status = 'error' code = '400'><result><msg>Illegal value for parameter &quot;action&quot; [commit]. Should be one of : [clone, complete, delete, edit, get, rename, set, show].</msg></result></response>$VAR1 = {
  status => 'error',
  result => {
    msg => 'Illegal value for parameter "action" [commit]. Should be one of : [clone, complete, delete, edit, get, rename, set, show].'
  },
  code => '400'
};
commit: Illegal value for parameter "action" [commit]. Should be one of : [clone, complete, delete, edit, get, rename, set, show]. status="error" code="400"

Can someone help?

[IsThisOneOkay]

on 4.1.3 use: panxapi -C "<commit></commit>"

[bart.wallace]

Thanks for the reply but I get the same error message...

/usr/local/bin/panxapi -h 192.168.x.x -K asdfasdfasdfasdfasdfasdfasdf -CD "<commit></commit>"

}, 'PAN::XAPI' );
$VAR1 = {
  action => 'commit',
  type => 'config',
  key => 'asdfasdasdfasdfasdfasdfasdf'
};
API response:
<response status = 'error' code = '400'><result><msg>Illegal value for parameter &quot;action&quot; [commit]. Should be one of : [clone, complete, delete, edit, get, rename, set, show].</msg></result></response>$VAR1 = {
  status => 'error',
  result => {
    msg => 'Illegal value for parameter "action" [commit]. Should be one of : [clone, complete, delete, edit, get, rename, set, show].'
  },
  code => '400'
};
commit: Illegal value for parameter "action" [commit]. Should be one of : [clone, complete, delete, edit, get, rename, set, show]. status="error" code="400"

[IsThisOneOkay]

try panxapi -C "<commit></commit>" -D

I'm seeing:

API version: 2

$VAR1 = {

  cmd => '<commit></commit>',

  type => 'commit',  key => 'dsfdsaofofuofdlkfjdlfjds'

};

API response:<response status="success" code="19"><result><msg><line>Commit job enqueued with jobid 20</line></msg><job>20</job></result></response>Content-Type: application/xml

$VAR1 = {  status => 'success',  result => {    msg => {      line => 'Commit job enqueued with jobid 20'    },    job => '20'  },  code => '19'};commit: success: Commit job enqueued with jobid 20

When I tried your version I got:

panxapi -CD "<commit></commit>"

commit: Illegal value for parameter "cmd" . status="error" code="400"

[IsThisOneOkay]

Your error messages sure look like you are still using PAN-perl-20110828 instead of PAN-perl-20111226. Is your perl path correct?

[bart.wallace]

Thanks - you were right.  My test machine was using latest code, my production machine was one behind.  Sorry to take your time, but thanks for the clarification.

Include the -C "<commit></commit>" and it works.

[ksomu]

please create .panrc file and have your key/credentilas listed in that file.

for example

ksomu@ksomu-VirtualBox:~/pan/PAN-perl-20111226/bin$ cat ~/.panrc
username=admin
password=admin
api_username=admin
api_password=admin
hostname=10.2.133.15
export TEMPLATE_HOME=/home/ksomu/pan/PAN-perl-20111226/templates/

ksomu@ksomu-VirtualBox:~/pan/PAN-perl-20111226/bin$ panxapi  -C
commit: success: Commit job enqueued with jobid 5

ksomu@ksomu-VirtualBox:~/pan/PAN-perl-20111226/bin$ panxapi -Xrpo 'show jobs id "5"'
op: success

$VAR1 = {
  job => {
    warnings => {
      line => [
        'Interface ethernet1/14.10 has no zone configuration.',
        'Interface ethernet1/14.10 has no virtual-router configuration.'
      ]
    },
    progress => '16:13:45',
    status => 'FIN',
    details => {
      line => 'Configuration committed successfully'
    },
    stoppable => 'no',
    tenq => '2012/03/07 16:13:27',
    tfin => '16:13:45',
    id => '5',
    type => 'Commit',
    result => 'OK'
  }
};