topic Re: Web API read-only login problem in API / CLI Discussion

Web API read-only login problem

Denis_Leskovar — Fri, 01 Mar 2019 12:22:33 GMT

Hi,

I have this weird problem. I am using vRealize orchestrator with JS.

When I want to login to our R80 checkpoint via script, I only get read only access, even tho I set parameter read-only to false. Here is the JSON I send

{"user":"someRandomUsername","password":"someRandomPassword","continue-last-session":false,"session-timeout":300,"read-only":false}

I can login and I can logout, discard, show-network. I set SID in header and it works in our test enviroment, but on production it fails. Our production environment in more or less the same and using 1.1. version of api.

When I want to call show-access-rulebase it returns undefined. It is quite large but it shouldn't be a problem because my program waits for the response.

I have no problem and have full read-write access when I login to r80 with SmartConsole,

I have like zero idea what is going wrong, plz help

Thanks

Re: Web API read-only login problem

PhoneBoy — Sat, 02 Mar 2019 02:50:03 GMT

First of all, if you're using a read-only user, you will not be able to ask for read-write mode

Even so, that parameter shouldn't be necessary unless you are a read-write user and you explicitly want read-only access.

Second, the show-access-rulebase command is, by default, limited to 500 items.

You can request more items, but you will get unpredictable results if you do so.

This means you will need to make multiple show-access-rulebase calls with offset parameters in order to retrieve all the rules.

Re: Web API read-only login problem

Denis_Leskovar — Mon, 04 Mar 2019 07:56:37 GMT

I am using user with read-write acces, I can use smartconsole with that user without problems.

I am looping through rulebase, using max limit of 500 results.

Re: Web API read-only login problem

HeikoAnkenbrand — Sun, 10 Mar 2019 13:31:18 GMT

Can this bug or feature with 500 rules be fixed in the next version?

Is there a rational explanation for this?

Re: Web API read-only login problem

PhoneBoy — Sun, 10 Mar 2019 15:50:40 GMT

The more items an API call has to return, the longer it takes for that API to return a result, the more memory required to provide it, etc.

The limits for the various API calls were chosen to balance those needs.

Re: Web API read-only login problem

HeikoAnkenbrand — Sun, 10 Mar 2019 17:06:12 GMT

In times of 16 GB RAM.

Re: Web API read-only login problem

Denis_Leskovar — Mon, 11 Mar 2019 09:40:17 GMT

Well, I guess there is some weird bug if you have running instance of SmartConsole with same user and opened view of rulebase. Same applies if you add new interface to e.g. VSX, if you open edit window and then run command with vsx_provisioning_tool from SSH with clish, it won't work.

As for 16 gigs of ram. Rulebase of around 400 rules takes around 4 to 5 seconds to retrieve on machine with 16 gigs of ram. I don't know if it is problem with vRealize Orchestrator or is the nature of CP. I didn't test it with other backend.

Re: Web API read-only login problem

_Val_ — Mon, 11 Mar 2019 17:17:24 GMT

Please open a TAC case.