topic Ah, ok. What version of ISE in Network Access Control

Password update of CISCO ISE through External RESTful Services APIs for Internal User

promila — Mon, 11 Mar 2019 06:57:02 GMT

Hi Expert,

I am trying to change password of existing Identities by below PHP code.

////here is the main part of code

  $random_password="Hi@12345";

  //echo $xmlstr;

  ////update the password of $username

  //generate the contents
  $cont='<?xml version="1.0" encoding="UTF-8" standalone="yes"?>' . "\n";
     $cont=$cont.'<ns3:internaluser description="'.$description.'" name="'.$username.'" id="'.$id.'"'."\n";
     $cont=$cont.'xmlns:ns2="ers.ise.cisco.com" xmlns:ns3="identity.ers.ise.cisco.com">'."\n";
     $cont=$cont.'<customAttributes>'."\n";
     $cont=$cont.'</customAttributes>'."\n";
     $cont=$cont.'<identityGroups>6f7b7c90-f111-11e5-8dfc-005056a8f91d</identityGroups>'."\n";
     $cont=$cont.'<password>'.$random_password.'</password>'."\n";
     $cont=$cont. '</ns3:internaluser>';

  $options = array (
    'http' =>
    array (
    'method' => 'PUT',
   'ignore_errors' => true,
   'header' =>
   array (
       0 => "Authorization: Basic " . base64_encode("$username_ise:$password_ise"),
       1 => 'Content-Type: application/vnd.com.cisco.ise.identity.internaluser.1.0+xml'
     ),
   'content' => $cont,
      )
   );

////getting response without any error as:

<?xml version="1.0" encoding="utf-8" standalone="yes"?><ns3:updatedFields xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:ns3="ers.ise.cisco.com"/>

But the password is not changed eventually.

All other attributes (first name, last name, email etc) are changing successfully except password. Even If tried to change password beyond policy, it returned error with policy violation texts too. But for the right case, its not changing the password. Any idea or suggestion?

You need this in your xml

jan.nielsen — Tue, 26 Jul 2016 19:21:56 GMT

You need this in your xml right before the customAttributes section start :

hi Jan,

promila — Tue, 26 Jul 2016 20:17:37 GMT

hi Jan,

that attribute is to enable user to change pass at immediate login. But I want to update any existing password of entities.

hope you get my issue.

Ah, ok. What version of ISE

jan.nielsen — Tue, 26 Jul 2016 20:49:00 GMT

Ah, ok. What version of ISE are you on ?

Identity Services Engine

promila — Wed, 27 Jul 2016 00:43:22 GMT

Identity Services Engine

Version	2.0.0.306
Product Identifier (PID)	ISE-VM-K9
Version Identifier (VID)	V01

ADE-OS Version	2.3.0.187

Issue Resolved.

promila — Wed, 27 Jul 2016 19:55:27 GMT

Issue Resolved.

Thanks in advance.

What was the problem then ?

jan.nielsen — Thu, 28 Jul 2016 16:55:05 GMT

What was the problem then ?

Re: Issue Resolved.

ARTUROWATR — Thu, 19 Nov 2020 14:19:42 GMT

I have de same issue, how did you manage to solve it?