pxGrid User/Password credentials based auth fails for download sessions

[Parag Mahajan]

Hi All,

We are trying User/Password credential based pxGrid authentication for My setup ISE version is 2.2P9 and pxGrid controller version=1.0.4.22. We are using Java SDK.

I  am having issue where, Download sessions fails with 401 error while session subscription works with credentials based pxGrid authentication.

Please find below logs. Is there any additional setup required to make download session work with credential based authentication? Please suggest.

------- properties -------

  version=2.0.0.14

  hostnames=10.10.1.40

  username=macpass

  password= thc9kqmCAbqvb1If

  group=Session

  description=null

  keystoreFilename=null

  keystorePassword=cisco123

  truststoreFilename=null

  truststorePassword=cisco123

--------------------------

thc9kqmCAbqvb1If

Connecting...

18:13:18.620 [main] INFO com.cisco.pxgrid.Configuration - Connecting to host 10.10.1.40

18:13:19.309 [main] INFO com.cisco.pxgrid.Configuration - Connected OK to host 10.10.1.40

18:13:19.309 [main] INFO com.cisco.pxgrid.Configuration - Client Login to host 10.10.1.40

18:13:19.765 [main] INFO com.cisco.pxgrid.Configuration - Client Login OK to host 10.10.1.40

18:13:19.852 [Smack-Cached Executor 0 (0)] DEBUG com.cisco.pxgrid.GridConnection - associate presence packet received (type=available, from=macpass@xgrid.cisco.com)

18:13:21.363 [main] DEBUG com.cisco.pxgrid.GridConnection - Controller version: 1.0.4.22

18:13:21.363 [main] DEBUG com.cisco.pxgrid.GridConnection - Pending account approval

Account enabled

18:15:01.395 [main] DEBUG com.cisco.pxgrid.internal.CapabilityManager - refreshing connection state...

18:15:02.583 [main] DEBUG com.cisco.pxgrid.internal.CapabilityManager - subscribed (topic=Core)

18:15:02.583 [main] DEBUG com.cisco.pxgrid.internal.CapabilityManager - done refreshing connection state.

18:15:02.584 [main] DEBUG com.cisco.pxgrid.internal.smack.NotificationHandlerSmack - refreshing connection state...

18:15:02.828 [main] INFO com.cisco.pxgrid.internal.smack.NotificationHandlerSmack - done refreshing connection state.

Connected

Filters (ex. '1.0.0.0/255.0.0.0,1234::/16...' or <enter> for no filter):

Start time (ex. '2015-01-31 13:00:00' or <enter> for no start time):

End time (ex. '2015-01-31 13:00:00' or <enter> for no end time):

pxGrid controller version=1.0.4.22

Going to url:https://palabise.fplab.local:8910/pxgrid/mnt/sd/getSessionListByTime

Download failed from https://palabise.fplab.local:8910/pxgrid/mnt/sd/getSessionListByTime:java.io.IOException: Server returned HTTP response code: 401 for URL: https://palabise.fplab.local:8910/pxgrid/mnt/sd/getSessionListByTime

18:15:10.036 [main] DEBUG com.cisco.pxgrid.internal.smack.NotificationHandlerSmack - clearing connection state...

18:15:10.036 [main] INFO com.cisco.pxgrid.internal.smack.NotificationHandlerSmack - cleared connection state...

Connection closed

Please let me know if you need more information in this regards.

[paul]

I can't answer this question, but I can  ask if you are developing your own pxGrid integration why would you waste time on pxGrid 1.0 implementation?  Upgrade your deployment to 2.3+ and look to leverage pxGrid 2.0 REST APIs.  That is Cisco's direction.

https://developer.cisco.com/docs/pxgrid-api/#!overview

[jeppich · Accepted solution]

Hey Parag,

I am on PTO this week and returning on Aug. 27th, in the meanwhile, using the following reference: "Username and Password for pxGrid client: https://d1nmyq4gcgsfi5.cloudfront.net/fileMedia/5d7f78b8-c5ec-4b1d-a3f0-3629b4c83807/pxGrid_usernamePassword_JE08012016.pdf

Also what version of ISE are you using, unicast me the details.

Thanks,

John

jeppich@cisco.com

[Aleksandr Serov]

Could someone please help to find "pxGrid 2.0 Sample Scripts".  There is a lot of documentation referred to them but I can not find these scripts nowhere.

Thank you in advance

[jeppich · Accepted solution]

You can go to www.cisco.com/go/pxgridpartner<> , you can find pxGrid 2.0 technical details and sample pxGrid 2.0 scripts up there as well.