topic Re: Is it possible to enable/disable ISE internal user using ERS REST APIs in Network Access Control

Is it possible to enable/disable ISE internal user using ERS REST APIs

rvkota — Sun, 05 May 2019 02:24:39 GMT

Using either "name" or "id" of the internal user on ISE, is it possible to toggle the flag ("enabled") to true/false without changing any other attributes of the "Internaluser"?.

I used <changePassword>false</changePassword> hoping that password would not be updated (attempted when InternalUser object i sused)

The error I see is " code="Conversion exception"><title>Password can't be set to one of the earlier 1 password(s)"

Any additional documentation on ERS Java APIs such as public methods exposed for clients to use say for "InternalUser" class.

Thank you all in advance

Re: Is it possible to enable/disable ISE internal user using ERS REST APIs

hslai — Sun, 05 May 2019 05:58:26 GMT

Here is an example:

curl -X PUT -k -H 'Content-Type: application/json' -H 'Accept: application/json' -i \
'https://myErsAdminUserName:myErsAdminPassword@myISE:9060/ers/config/internaluser/myInternalUserID' \
--data '{
  "InternalUser" : {
    "id" : "myInternalUserID",
    "name" : "myInternalUserName",
    "enabled" : false
  }
}'

Re: Is it possible to enable/disable ISE internal user using ERS REST APIs

rvkota — Sun, 05 May 2019 23:44:37 GMT

hslai,

Thank you.

Your solutions looks very simple, not using the ERS Java APIs, but just execute a HTTP GET/PUT requests.

Will implement this and check.

Kind Regards