cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1409
Views
0
Helpful
13
Replies

unable to do REST-API's to Catalyst Centers

uher01
Level 1
Level 1

Hi Cisco Team,

I'm trying to do some API tests with the Catalyst Centers Sandboxes. Unfortunatelly both ( https://sandboxdnac.cisco.com and https://sandboxdnac2.cisco.com ) seems not permitting any access anymore. I now get the error messages : {'error': 'Base64 Authorization is not allowed'}

It'd very benefical if this will be restored, are they in maintenance ? Only GUI is nice but especially for some advanced testing API's would be very helpful. Has something changed there ? I'm quite sure that some days ago it worked.

Many thanks!

Uwe

 

1 Accepted Solution

Accepted Solutions

ecorban
Cisco Employee
Cisco Employee

AES encryption for authentication on both sandbox dnac and dnac2 is disabled. Please keep in mind that users have ability to enable it with AES Key.

View solution in original post

13 Replies 13

@uher01 what testing are you trying to do, the always on devices only accept read/get request. Can you share your method/code authentication? 

Please mark this as helpful or solution accepted to help others
Connect with me https://bigevilbeard.github.io

Hi @bigevilbeard - I'm also seeing this error (first time ever using so not confirmed working previously for me). When i use POST - https://sandboxdnac.cisco.com/dna/system/api/v1/auth/token along with creds in header I get a 502 bad gateway error. When using POST - https://sandboxdnac2.cisco.com/dna/system/api/v1/auth/token i get an error;

{
    "error": "Base64 Authorization is not allowed"
}

 

 

@dannyboy1982 @uher01 sandboxdnac i get bad gateway on the UI and API for sandboxdnac2.. i get the same as yall, but i can access the UI ok. So must be a sandbox issue

❯ curl -s -X POST https://sandboxdnac2.cisco.com/dna/system/api/v1/auth/token -H "Authorization: Basic ZGV2bmV0dXNlcjpDaXNjbzEyMyE="
{"error":"Base64 Authorization is not allowed"}

 

Please mark this as helpful or solution accepted to help others
Connect with me https://bigevilbeard.github.io

Hi bigevilbeard,

thanks for your quick response. It stops very basically. I'm not able to retrive any token.

def get_dnac_token():
USERNAME = dnac["user"]
PASSWORD = dnac["passwd"]
BASE_URL = "https://"+dnac["host"]
AUTH_URL = '/dna/system/api/v1/auth/token'

response = requests.post(BASE_URL + AUTH_URL,
auth=HTTPBasicAuth(USERNAME, PASSWORD),
verify=False)
print(response.json())
#token = response.json()['Token']


#return token

 

 
 

crazednetworker
Level 1
Level 1

 I too am unable to get anything and I get  an bad gateway when trying https://sandboxdnac.cisco.com from Http I was able to get a token from Wednesday, I believe but not since then I can't doing anything for 2 either for a token however HTTPS works on the second one  

AES encryption is on and appears to disable base64 auth method.  Not sure who to contact to change this setting

MichaelBoast_0-1721077497832.png

 

You will either have to contact someone with admin permissions for your Catalyst Center to have this changed, or start using the enabled AES encryption.

NOTE: Making changes to this will break authentication for existing applications that are using AES encryption for authentication.

Happy to help! Please mark as helpful/solution if applicable.
Get in touch: https://torbjorn.dev

As this is read only for user, guessing only an admin can change this - @jokearns1 

Please mark this as helpful or solution accepted to help others
Connect with me https://bigevilbeard.github.io

dannyboy1982
Level 1
Level 1

This service now appears back up - I'm able to retrieve an auth token today

unfortunatelly obviously only temporary, still get {'error': 'Base64 Authorization is not allowed'}

it seems https://sandboxdnac.cisco.com is now restored. REST-API is currently functional with this box. https://sandboxdnac2.cisco.com is still responding with {'error': 'Base64 Authorization is not allowed'}. Hope that at least for one sandbox function will remain.

ecorban
Cisco Employee
Cisco Employee

AES encryption for authentication on both sandbox dnac and dnac2 is disabled. Please keep in mind that users have ability to enable it with AES Key.

joanlee9494
Level 1
Level 1

hey i got your point and you can direct contact with website taker in Instagram through this website enjoy it.  https://iiganony.com/