cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3983
Views
5
Helpful
6
Replies

ISE v1.3 - How do you export Guest user accounts

neilo
Level 1
Level 1

Hi,

 

We've just built a new ISE VM, I have a question around the sponsor portal (already have the admin guide), does anyone know if V1.3 has the ability to export the newly created Guest User accounts?  Our old ISE V1.1 does but I can't seem to find the option for V1.3

 

Any help at all would be greatly appreciated.

 

Regards

Neil

 

6 Replies 6

Hi Neil,


I asked for something similar couple months ago.
The only way I know till now is using ERS REST Based API for Guests.

As I'm newbie with REST FULL API I could not export all users in a only one request.
I'm trying to solve this with a Service Request that is still open.


Regards

Marcelo Castro

Hi Marcelo,

Please try this:

Method: GET
URI: https://<ISE IP ADDRESS>:9060/ers/config/guestuser/name/{name}
HTTP Accept header:
application/vnd.com.cisco.ise.identity.guestuser.2.0+xml

HTH - Jatin

~Jatin

Hey guys. I just tested this and was able to output the key info for my guests (in a test lab). This allowed me to massage the guest information into a format whereby it could be imported into my new ISE.

# WARNING - THIS IS A CRUDE METHOD WITH LITTLE ATTEMPT TO MAKE IT EFFICIENT #

Retrieve list of all guest user accounts:

 

root@kali:~#  curl -k https://erstest:Password1@10.5.123.69:9060/ers/config/guestuser -H

 

root@kali:~# cat guestuserall.txt

{

  "SearchResult" : {

    "total" : 20,

    "resources" : [ {

      "id" : "00a1b3c1-24b4-11e7-bbb1-0050568f4d09",

      "name" : "2vj93o",

      "link" : {

        "rel" : "self",

        "href" : "https://10.5.123.69:9060/ers/config/guestuser/00a1b3c1-24b4-11e7-bbb1-0050568f4d09",

        "type" : "application/xml"

      }

    }, {

      "id" : "00bbcb71-24b4-11e7-bbb1-0050568f4d09",

      "name" : "45b3vr",

      "link" : {

        "rel" : "self",

        "href" : "https://10.5.123.69:9060/ers/config/guestuser/00bbcb71-24b4-11e7-bbb1-0050568f4d09",

        "type" : "application/xml"

      }

    }, {

      "id" : "00ad9aa1-24b4-11e7-bbb1-0050568f4d09",

      "name" : "7zp47c",

 

 

Sanitise this into a list of guest user ids:

 

root@kali:~# cat guestuserall.txt | grep  "id" | cut -d " " -f9 | sed 's|[",]||g' > guestuserids.txt

 

root@kali:~# more guestuserids.txt

00a1b3c1-24b4-11e7-bbb1-0050568f4d09

00bbcb71-24b4-11e7-bbb1-0050568f4d09

00ad9aa1-24b4-11e7-bbb1-0050568f4d09

00b5d801-24b4-11e7-bbb1-0050568f4d09

00bf26d1-24b4-11e7-bbb1-0050568f4d09

8a440772-1f48-11e7-bbb1-0050568f4d09

00b89721-24b4-11e7-bbb1-0050568f4d09

00c20d01-24b4-11e7-bbb1-0050568f4d09

00c4cc21-24b4-11e7-bbb1-0050568f4d09

00aab471-24b4-11e7-bbb1-0050568f4d09

00c78b41-24b4-11e7-bbb1-0050568f4d09

1c282f72-2487-11e7-bbb1-0050568f4d09

7608f600-1f46-11e7-bbb1-0050568f4d09

33817831-2486-11e7-bbb1-0050568f4d09

c82eb1b0-1f44-11e7-bbb1-0050568f4d09

00a4c101-24b4-11e7-bbb1-0050568f4d09

00ca4a61-24b4-11e7-bbb1-0050568f4d09

8c068872-24ad-11e7-bbb1-0050568f4d09

5f4baf70-2487-11e7-bbb1-0050568f4d09

d47a4fe1-2487-11e7-bbb1-0050568f4d09

root@kali:~#

 

 

For each guest user id, claw back full details of the guest (including password):

 

root@kali:~# for userids in $(cat guestuserids.txt); do curl -k https://erstest:Password1@10.5.123.69:9060/ers/config/guestuser/$userids -H Accept:application/json; done > guestusercredsraw.txt

 

root@kali:~# more guestusercredsraw.txt

{

  "GuestUser" : {

    "id" : "00a1b3c1-24b4-11e7-bbb1-0050568f4d09",

    "name" : "2vj93o",

    "guestType" : "Contractor (default)",

    "status" : "AWAITING_INITIAL_LOGIN",

    "sponsorUserName" : "admin",

    "sponsorUserId" : "7e2956b2-24ad-11e7-bbb1-0050568f4d09",

    "guestInfo" : {

      "userName" : "2vj93o",

      "password" : "7625",

      "creationTime" : "04/18/2017 20:55",

      "enabled" : false,

      "notificationLanguage" : "English"

    },

    "guestAccessInfo" : {

      "validDays" : 1,

      "fromDate" : "04/19/2017 13:55",

      "toDate" : "04/19/2017 23:59",

      "location" : "San Jose"

    },

    "customFields" : {

    },

    "link" : {

      "rel" : "self",

      "href" : "https://10.5.123.69:9060/ers/config/guestuser/00a1b3c1-24b4-11e7-bbb1-0050568f4d09",

      "type" : "application/xml"

    }

  }

}{

  "GuestUser" : {

    "id" : "00bbcb71-24b4-11e7-bbb1-0050568f4d09",

    "name" : "45b3vr",

    "guestType" : "Contractor (default)",

    "status" : "AWAITING_INITIAL_LOGIN",

    "sponsorUserName" : "

 

 

Optionally, sanitise this output to only show some major details about the guests:

 

root@kali:~# cat guestusercredsraw.txt | grep -E 'guestType|status|guestInfo|userName|password' > finalguestinfo.txt

 

root@kali:~# more finalguestinfo.txt

    "guestType" : "Contractor (default)",

    "status" : "AWAITING_INITIAL_LOGIN",

    "guestInfo" : {

      "userName" : "2vj93o",

      "password" : "7625",

    "guestType" : "Contractor (default)",

    "status" : "AWAITING_INITIAL_LOGIN",

    "guestInfo" : {

      "userName" : "45b3vr",

      "password" : "1527",

    "guestType" : "Contractor (default)",

    "status" : "AWAITING_INITIAL_LOGIN",

    "guestInfo" : {

      "userName" : "7zp47c",

      "password" : "2889",

    "guestType" : "Contractor (default)",

    "status" : "AWAITING_INITIAL_LOGIN",

    "guestInfo" : {

      "userName" : "893yfs",

      "password" : "0220",

    "guestType" : "Contractor (default)",

    "status" : "AWAITING_INITIAL_LOGIN",

    "guestInfo" : {

      "userName" : "9wge99",

      "password" : "5922",

    "guestType" : "Contractor (default)",

    "status" : "EXPIRED",

    "guestInfo" : {

      "userName" : "djohnson",

      "password" : "7124",

    "guestType" : "Contractor (default)",

    "status" : "AWAITING_INITIAL_LOGIN",

    "guestInfo" : {

      "userName" : "e9gi23",

      "password" : "2454",

    "guestType" : "Contractor (default)",

    "status" : "AWAITING_INITIAL_LOGIN",

    "guestInfo" : {

      "userName" : "fs78v8",

      "password" : "8752",

    "guestType" : "Contractor (default)",

    "status" : "AWAITING_INITIAL_LOGIN",

    "guestInfo" : {

      "userName" : "g896oy",

      "password" : "5829",

    "guestType" : "Contractor (default)",

    "status" : "AWAITING_INITIAL_LOGIN",

    "guestInfo" : {

      "userName" : "h59ui7",

      "password" : "5507",

    "guestType" : "Contractor (default)",

    "status" : "AWAITING_INITIAL_LOGIN",

    "guestInfo" : {

      "userName" : "ia764t",

      "password" : "4446",

    "guestType" : "Daily (default)",

    "status" : "PENDING_APPROVAL",

    "guestInfo" : {

      "userName" : "jamesbond",

      "password" : "9426",

    "guestType" : "Daily (default)",

    "status" : "EXPIRED",

    "guestInfo" : {

      "userName" : "johndond",

      "password" : "6798",

    "guestType" : "Daily (default)",

    "status" : "AWAITING_INITIAL_LOGIN",

    "guestInfo" : {

      "userName" : "johnson",

      "password" : "9945",

    "guestType" : "Daily (default)",

    "status" : "EXPIRED",

    "guestInfo" : {

      "userName" : "johnson4d",

      "password" : "1919",

    "guestType" : "Contractor (default)",

    "status" : "AWAITING_INITIAL_LOGIN",

    "guestInfo" : {

      "userName" : "l5ms83",

      "password" : "8638",

    "guestType" : "Contractor (default)",

    "status" : "AWAITING_INITIAL_LOGIN",

    "guestInfo" : {

      "userName" : "oyw528",

      "password" : "7022",

    "guestType" : "Contractor (default)",

    "status" : "AWAITING_INITIAL_LOGIN",

    "guestInfo" : {

      "userName" : "rdazzle",

      "password" : "1227",

    "guestType" : "Daily (default)",

    "status" : "PENDING_APPROVAL",

    "guestInfo" : {

      "userName" : "user12345",

      "password" : "1889",

    "guestType" : "Daily (default)",

    "status" : "PENDING_APPROVAL",

    "guestInfo" : {

      "userName" : "user9876",

      "password" : "7654",

root@kali:~# 

Hi Jatin

Does the API work on version 1.2 of ise?

Jatin Katyal
Cisco Employee
Cisco Employee

Hi Neil,


Unfortunately, it's not possble to export from sponsor portal. We've a PER open for this feature:
CSCty82007    ENH: Export Guest Accounts Configured in ISE

...and yes this can only be possible by REST API.

Regards,
Jatin

~Jatin

jan.nielsen
Level 7
Level 7

As others have indicated, you need to use the REST API to get all guest users out, however it's not possible with one request. First of, you will only get 100 at a time, ISE uses paging to give you the accounts one page at a time. If you feel like trying, i have posted a php script that does the stuff you need but for endpoints, not guests, but the concept is the same.

https://supportforums.cisco.com/discussion/12742536/ise-doubts-about-ers-rest-based-api-guests

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: