topic What ISE version are you in Network Access Control

ISE API Create Internal User 415 Error

brianpocock2 — Mon, 11 Mar 2019 06:42:26 GMT

Hey,

Has anyone had any luck using the ISE REST API to create users?

I'm making the following request:

POST /ers/config/internaluser HTTP/1.1

<?xml version="1.0" encoding="utf-8" standalone="yes"?> 
<ns3:inernaluser xmlns:ns2=“ers.ise.cisco.com” xmlns:ns3=“identity.ers.ise.cisco.com” name=“username”>
 <changePassword>true</changePassword>
 <customAttribute/>
 <enabled>true</enabled> 
 <firstName>first</firstName>
 <lastName>last</lastName> 
 <password>cisco</password> 
</ns3:internaluser>

<?xml version="1.0" encoding="utf-8" standalone="yes"?><ns3:ersResponse operation="POST-create-internaluser" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:ns3="ers.ise.cisco.com"><link rel="related" href="https://x.x.x.x:9060/ers/config/internaluser" type="application/xml"/><messages><message type="ERROR" code="Resource media type exception"><title>The specified content-type is not supported. check the resource name in the request URI or the media type specified in the 'Accept' header.</title></message></messages></ns3:ersResponse>

Can anyone spot the issue here?

Cheers

What ISE version are you

jan.nielsen — Tue, 26 Apr 2016 16:40:45 GMT

What ISE version are you running?

2.0.0.306 Cheers

brianpocock2 — Tue, 26 Apr 2016 16:56:30 GMT

2.0.0.306

Cheers

Don't know where you got your

jan.nielsen — Tue, 26 Apr 2016 17:21:02 GMT

Don't know where you got your example from, but there are some errors in the xml, and also in the headers you are sending.

Your header : accept: xxxxx changed to

Content-Type: application/vnd.com.cisco.ise.identity.internaluser.1.0+xml

I made this xml, i marked the things i changed from the cisco api guide example in bold :

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<ns3:internaluser description="description" name="testuser" id="id" xmlns:ns2="ers.ise.cisco.com" xmlns:ns3="identity.ers.ise.cisco.com">

<customAttributes></customAttributes>

<email>email@example.com</email>

</ns3:internaluser>

Remember the password has to follow the password requirements set for internal users in ise, the customattributes section is mandatory, even thought there are none set. Identity group is also mandatory, the id can be found with another api call.

Everything is described here :http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/api_ref_guide/api_ref_book/ise_api_ref_ers2.html

Thanks, that sorted it. I

brianpocock2 — Tue, 26 Apr 2016 19:38:47 GMT

Thanks, that sorted it. I was getting confused between when using accept and content type headers between gets and posts. Also missing the identity groups attribute.

Cheers!

No problem, the documentation

jan.nielsen — Tue, 26 Apr 2016 20:03:10 GMT

No problem, the documentation can be a little confusing when it comes to the request headers, also they changed from ISE 1.x to 2.0