topic Re: TACACS Server API is not working in Network Access Control

TACACS Server API is not working

ShuningWu14393 — Thu, 14 Jul 2022 23:37:59 GMT

We try to access the TACACS Server API and collect the server information, following this example:

https://www.cisco.com/c/en/us/td/docs/routers/nfvis/user_guide/b-api-reference-for-cisco-enterprise-nfvis/b-api-reference-for-cisco-enterprise-nfvis_chapter_010000.html#get-tacacs-example011

However, after submitting the GET request to

/api/config/security_servers/tacacs-server?deep

, we receive this error message:

'<!--**************************************************-->\n<!-- Copyright (c) 2009 Cisco Systems, Inc.-->\n<!-- All rights reserved.-->\n<!--**************************************************-->\n\n<html><head/><title>ACS: Error</title><body><H1>ACS: Resource not found or internal server error</H1></body></html>\n<br />ErrorCode: 404\n\n'

Why does this happen? And how can we solve this error?

Re: TACACS Server API is not working

Damien Miller — Fri, 15 Jul 2022 04:32:01 GMT

What are you trying to connect to and poll with this API? The link and API you shared is for the ENFV platforms like the ENCS 5000 where you virtualize network platforms.

ACS and ISE have their own API documentation and resources.

Re: TACACS Server API is not working

ShuningWu14393 — Fri, 15 Jul 2022 13:55:28 GMT

Thanks, Damien! Could you point us to the correct ACS API documentation?

Re: TACACS Server API is not working

ahollifield — Fri, 15 Jul 2022 14:11:46 GMT

You are using ACS? Or ISE? https://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-8-1/sdk/acs_sdk.html

https://www.cisco.com/c/en/us/products/collateral/security/secure-access-control-system/eos-eol-c51-738197.html

Re: TACACS Server API is not working

ShuningWu14393 — Fri, 15 Jul 2022 16:11:57 GMT

ACS. We also find the second link to the API document, but the API still shows 404 client error below:

HTTPError: 404 Client Error: Not Found for url: https://172.10.100.21/Rest/Identity/User/

Do you know the reason for this?

Re: TACACS Server API is not working

Damien Miller — Fri, 15 Jul 2022 16:59:05 GMT

Which version of ACS are you running?

Re: TACACS Server API is not working

ShuningWu14393 — Fri, 15 Jul 2022 18:56:43 GMT

Secure Access Control System (ACS) 5.8

Re: TACACS Server API is not working

hslai — Sun, 17 Jul 2022 01:07:08 GMT

As ahollifield said, ACS 5.x has already reached EoS/EoL.

I got HTTP 404 if REST not enabled via the ACS admin CLI.

Enabling the REST Web Interface on ACS CLI

You must enable the web interface on ACS before you can use the REST web service. To enable the web interface on ACS, from the ACS CLI, enter:

acs config-web-interface rest enable

Re: TACACS Server API is not working

ShuningWu14393 — Mon, 18 Jul 2022 16:38:28 GMT

Thanks! We will check this with the system admin.