pxGrid User/Password credentials based auth fails for download sessions

Parag Mahajan — Tue, 21 Aug 2018 21:17:06 GMT

Hi All,

We are trying User/Password credential based pxGrid authentication for My setup ISE version is 2.2P9 and pxGrid controller version=1.0.4.22. We are using Java SDK.

I am having issue where, Download sessions fails with 401 error while session subscription works with credentials based pxGrid authentication.

Please find below logs. Is there any additional setup required to make download session work with credential based authentication? Please suggest.

------- properties -------

version=2.0.0.14

hostnames=10.10.1.40

username=macpass

password= thc9kqmCAbqvb1If

group=Session

description=null

keystoreFilename=null

keystorePassword=cisco123

truststoreFilename=null

truststorePassword=cisco123

--------------------------

thc9kqmCAbqvb1If

Connecting...

18:13:18.620 [main] INFO com.cisco.pxgrid.Configuration - Connecting to host 10.10.1.40

18:13:19.309 [main] INFO com.cisco.pxgrid.Configuration - Connected OK to host 10.10.1.40

18:13:19.309 [main] INFO com.cisco.pxgrid.Configuration - Client Login to host 10.10.1.40

18:13:19.765 [main] INFO com.cisco.pxgrid.Configuration - Client Login OK to host 10.10.1.40

18:13:19.852 [Smack-Cached Executor 0 (0)] DEBUG com.cisco.pxgrid.GridConnection - associate presence packet received (type=available, from=macpass@xgrid.cisco.com)

18:13:21.363 [main] DEBUG com.cisco.pxgrid.GridConnection - Controller version: 1.0.4.22

18:13:21.363 [main] DEBUG com.cisco.pxgrid.GridConnection - Pending account approval

Account enabled

18:15:01.395 [main] DEBUG com.cisco.pxgrid.internal.CapabilityManager - refreshing connection state...

18:15:02.583 [main] DEBUG com.cisco.pxgrid.internal.CapabilityManager - subscribed (topic=Core)

18:15:02.583 [main] DEBUG com.cisco.pxgrid.internal.CapabilityManager - done refreshing connection state.

18:15:02.584 [main] DEBUG com.cisco.pxgrid.internal.smack.NotificationHandlerSmack - refreshing connection state...

18:15:02.828 [main] INFO com.cisco.pxgrid.internal.smack.NotificationHandlerSmack - done refreshing connection state.

Connected

Filters (ex. '1.0.0.0/255.0.0.0,1234::/16...' or <enter> for no filter):

Start time (ex. '2015-01-31 13:00:00' or <enter> for no start time):

End time (ex. '2015-01-31 13:00:00' or <enter> for no end time):

pxGrid controller version=1.0.4.22

Going to url:https://palabise.fplab.local:8910/pxgrid/mnt/sd/getSessionListByTime

Download failed from https://palabise.fplab.local:8910/pxgrid/mnt/sd/getSessionListByTime:java.io.IOException: Server returned HTTP response code: 401 for URL: https://palabise.fplab.local:8910/pxgrid/mnt/sd/getSessionListByTime

18:15:10.036 [main] DEBUG com.cisco.pxgrid.internal.smack.NotificationHandlerSmack - clearing connection state...

18:15:10.036 [main] INFO com.cisco.pxgrid.internal.smack.NotificationHandlerSmack - cleared connection state...

Connection closed

Please let me know if you need more information in this regards.

Re: pxGrid User/Password credentials based auth fails for download sessions

paul — Wed, 22 Aug 2018 01:43:23 GMT

I can't answer this question, but I can ask if you are developing your own pxGrid integration why would you waste time on pxGrid 1.0 implementation? Upgrade your deployment to 2.3+ and look to leverage pxGrid 2.0 REST APIs. That is Cisco's direction.

https://developer.cisco.com/docs/pxgrid-api/#!overview

Re: pxGrid User/Password credentials based auth fails for download sessions

jeppich — Wed, 22 Aug 2018 03:57:11 GMT

Hey Parag,

I am on PTO this week and returning on Aug. 27th, in the meanwhile, using the following reference: "Username and Password for pxGrid client: https://d1nmyq4gcgsfi5.cloudfront.net/fileMedia/5d7f78b8-c5ec-4b1d-a3f0-3629b4c83807/pxGrid_usernamePassword_JE08012016.pdf

Also what version of ISE are you using, unicast me the details.

Thanks,

John

jeppich@cisco.com

Re: pxGrid User/Password credentials based auth fails for download sessions

Aleksandr Serov — Thu, 03 Oct 2019 14:05:00 GMT

Could someone please help to find "pxGrid 2.0 Sample Scripts". There is a lot of documentation referred to them but I can not find these scripts nowhere.

Thank you in advance

Re: pxGrid User/Password credentials based auth fails for download sessions

jeppich — Thu, 03 Oct 2019 15:04:54 GMT

You can go to www.cisco.com/go/pxgridpartner<> , you can find pxGrid 2.0 technical details and sample pxGrid 2.0 scripts up there as well.

topic Re: pxGrid User/Password credentials based auth fails for download sessions in Network Access Control

pxGrid User/Password credentials based auth fails for download sessions

Re: pxGrid User/Password credentials based auth fails for download sessions

Re: pxGrid User/Password credentials based auth fails for download sessions

Re: pxGrid User/Password credentials based auth fails for download sessions

Re: pxGrid User/Password credentials based auth fails for download sessions