topic Re: Anybody using GAIA API Proxy? in API / CLI Discussion

Anybody using GAIA API Proxy?

Oliver_Fink — Wed, 21 May 2025 13:54:02 GMT

I cannot get GAIA API Proxy to work and wonder if anyone did again.

How far I understood the way of usage is this:

I login to Management API first.
I take the session ID (SID) and request the URL https://<IP Address of Management Server>/web_api/gaia-api/<Gaia API Version>/<Gaia API Command> and a body containing JSON { "target" : "<IP> or <Object Name> or <OUID>" } for the GAIA API Call.
SMS asks SGW and returns result.
I am happy.

But that does not work. I get either a "500 server error" or a "404 Not Found".

Fun fact:

There are 3 examples in the linked document that all use other URL pathes – and that all do not work either.

Has anyone got this running and can shed some light?

Re: Anybody using GAIA API Proxy?

Timothy_Hall — Wed, 21 May 2025 14:20:28 GMT

Did you try the examples here?

https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/gaia-api~v2%20

I assume you have checked that the Gaia API is working properly on the final target with gaia_api status?

Next step is to look in $FWDIR/log/api.elg on the SMS for clues, and also on the Gaia target the log file /var/log/gaia_api_server.log. In many cases while teaching the CCAS class, looking at these log files is the only way to figure out what is wrong due to syntax /parsing errors and such.

Re: Anybody using GAIA API Proxy?

Amir_Senn — Thu, 22 May 2025 06:50:08 GMT

You need to log with GAIA API, not MGMT API, if I understood correctly.

https://sc1.checkpoint.com/documents/latest/GaiaAPIs/index.html#cli/login~v1.8%20

Use that session ID.

I got a message for the action man:

I'm happy, hope you're happy too

Re: Anybody using GAIA API Proxy?

Oliver_Fink — Thu, 22 May 2025 10:06:43 GMT

Thank you for referring to the log files. I should have had a look on them earlier. What should I say? I picked just that one cluster that had an expired external HTTPS certificate for my tests. 😕

That said: I would qualify the URL pathes in every of the 3 examples in the Gaia API-Proxy documentation as wrong.

Re: Anybody using GAIA API Proxy?

Oliver_Fink — Thu, 22 May 2025 10:59:46 GMT

Nope, the way is as I wrote. I do not want to connect to the Gaia API of the SGW directly, but use the SMS as Gaia API Proxy.