<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Unable to authenticate via API in Controllers</title>
    <link>https://community.cisco.com/t5/controllers/unable-to-authenticate-via-api/m-p/3601638#M3132</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Sorry everyone. I should have read the &lt;A href="https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/rest_cfg/2_1_x/b_Cisco_APIC_REST_API_Configuration_Guide/b_Cisco_APIC_REST_API_Configuration_Guide_chapter_01.html#concept_D16AC6DC9CCD4351A4A40287487F061A"&gt;doco&lt;/A&gt; more closely.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN class="synph" style="font-size: 14px; font-family: CiscoSans, Arial, sans-serif; color: #58585b;"&gt;&lt;SPAN class="kwd" style="font-style: inherit; font-weight: bold; font-size: inherit; font-family: inherit;"&gt;"aaaLogin&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;SPAN style="color: #58585b; font-family: CiscoSans, Arial, sans-serif; font-size: 14px;"&gt;—Sent as a POST message, this method logs in a user and opens a session. The message body contains an aaa:User object with the name and password attributes, and the response contains a session token and cookie. &lt;STRONG&gt;If multiple AAA login domains are configured, you must prepend the user's name with &lt;/STRONG&gt;&lt;/SPAN&gt;&lt;STRONG&gt;&lt;SPAN class="synph" style="font-size: 14px; font-family: CiscoSans, Arial, sans-serif; color: #58585b;"&gt;&lt;SPAN class="kwd" style="font-style: inherit; font-size: inherit; font-family: inherit;"&gt;apic:&lt;/SPAN&gt;&lt;SPAN class="var" style="font-style: oblique; font-size: inherit; font-family: inherit;"&gt;domain&lt;/SPAN&gt;&lt;SPAN class="kwd" style="font-style: inherit; font-size: inherit; font-family: inherit;"&gt;\\&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/STRONG&gt;&lt;SPAN style="color: #58585b; font-family: CiscoSans, Arial, sans-serif; font-size: 14px;"&gt;&lt;STRONG&gt;."&lt;/STRONG&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Thu, 28 Sep 2017 04:34:37 GMT</pubDate>
    <dc:creator>Ben Clifton</dc:creator>
    <dc:date>2017-09-28T04:34:37Z</dc:date>
    <item>
      <title>Unable to authenticate via API</title>
      <link>https://community.cisco.com/t5/controllers/unable-to-authenticate-via-api/m-p/3601637#M3131</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi all,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I'm able to successfully login to the APIC with a particular set of credentials via the GUI, but when I try to login via the API I get "Username or password is incorrect - FAILED local authentication".&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Below is the request I'm making, along with the response:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;Request&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;URI:&lt;/P&gt;&lt;P&gt;&lt;SPAN style="color: #505050; font-family: OpenSans, Helvetica, Arial, sans-serif; font-size: 12px; background-color: #fafafa;"&gt;&lt;A _jive_internal="true" href="https://community.cisco.com/[APIC]/api/aaaLogin.json" rel="nofollow" target="_blank"&gt;https://[APIC]/api/aaaLogin.json&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="color: #505050; font-family: OpenSans, Helvetica, Arial, sans-serif; font-size: 12px; background-color: #fafafa;"&gt;Body:&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="color: #505050; font-family: OpenSans, Helvetica, Arial, sans-serif; font-size: 12px; background-color: #fafafa;"&gt;{"aaaUser": {"attributes": {"name": "username", "pwd": "password"}}}&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;Response&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;{&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; "totalCount": "1",&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; "imdata": [&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; {&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; "error": {&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; "attributes": {&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; "code": "401",&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; "text": "Username or password is incorrect - FAILED local authentication"&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; }&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; }&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; }&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; ]&lt;/P&gt;&lt;P&gt;}&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Is the APIC trying to authenticate this user against the local user store rather than TACACS+?&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 28 Sep 2017 04:21:02 GMT</pubDate>
      <guid>https://community.cisco.com/t5/controllers/unable-to-authenticate-via-api/m-p/3601637#M3131</guid>
      <dc:creator>Ben Clifton</dc:creator>
      <dc:date>2017-09-28T04:21:02Z</dc:date>
    </item>
    <item>
      <title>Re: Unable to authenticate via API</title>
      <link>https://community.cisco.com/t5/controllers/unable-to-authenticate-via-api/m-p/3601638#M3132</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Sorry everyone. I should have read the &lt;A href="https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/rest_cfg/2_1_x/b_Cisco_APIC_REST_API_Configuration_Guide/b_Cisco_APIC_REST_API_Configuration_Guide_chapter_01.html#concept_D16AC6DC9CCD4351A4A40287487F061A"&gt;doco&lt;/A&gt; more closely.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN class="synph" style="font-size: 14px; font-family: CiscoSans, Arial, sans-serif; color: #58585b;"&gt;&lt;SPAN class="kwd" style="font-style: inherit; font-weight: bold; font-size: inherit; font-family: inherit;"&gt;"aaaLogin&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;SPAN style="color: #58585b; font-family: CiscoSans, Arial, sans-serif; font-size: 14px;"&gt;—Sent as a POST message, this method logs in a user and opens a session. The message body contains an aaa:User object with the name and password attributes, and the response contains a session token and cookie. &lt;STRONG&gt;If multiple AAA login domains are configured, you must prepend the user's name with &lt;/STRONG&gt;&lt;/SPAN&gt;&lt;STRONG&gt;&lt;SPAN class="synph" style="font-size: 14px; font-family: CiscoSans, Arial, sans-serif; color: #58585b;"&gt;&lt;SPAN class="kwd" style="font-style: inherit; font-size: inherit; font-family: inherit;"&gt;apic:&lt;/SPAN&gt;&lt;SPAN class="var" style="font-style: oblique; font-size: inherit; font-family: inherit;"&gt;domain&lt;/SPAN&gt;&lt;SPAN class="kwd" style="font-style: inherit; font-size: inherit; font-family: inherit;"&gt;\\&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/STRONG&gt;&lt;SPAN style="color: #58585b; font-family: CiscoSans, Arial, sans-serif; font-size: 14px;"&gt;&lt;STRONG&gt;."&lt;/STRONG&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 28 Sep 2017 04:34:37 GMT</pubDate>
      <guid>https://community.cisco.com/t5/controllers/unable-to-authenticate-via-api/m-p/3601638#M3132</guid>
      <dc:creator>Ben Clifton</dc:creator>
      <dc:date>2017-09-28T04:34:37Z</dc:date>
    </item>
  </channel>
</rss>

