cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

475
Views
0
Helpful
4
Replies
Highlighted
Cisco Employee

pxGrid User/Password credentials based auth fails for download sessions

Hi All,

 

We are trying User/Password credential based pxGrid authentication for My setup ISE version is 2.2P9 and pxGrid controller version=1.0.4.22. We are using Java SDK.

 

I  am having issue where, Download sessions fails with 401 error while session subscription works with credentials based pxGrid authentication.

 

Please find below logs. Is there any additional setup required to make download session work with credential based authentication? Please suggest.

 

------- properties -------

  version=2.0.0.14

  hostnames=10.10.1.40

  username=macpass

  password= thc9kqmCAbqvb1If

  group=Session

  description=null

  keystoreFilename=null

  keystorePassword=cisco123

  truststoreFilename=null

  truststorePassword=cisco123

--------------------------

thc9kqmCAbqvb1If

Connecting...

18:13:18.620 [main] INFO com.cisco.pxgrid.Configuration - Connecting to host 10.10.1.40

18:13:19.309 [main] INFO com.cisco.pxgrid.Configuration - Connected OK to host 10.10.1.40

18:13:19.309 [main] INFO com.cisco.pxgrid.Configuration - Client Login to host 10.10.1.40

18:13:19.765 [main] INFO com.cisco.pxgrid.Configuration - Client Login OK to host 10.10.1.40

18:13:19.852 [Smack-Cached Executor 0 (0)] DEBUG com.cisco.pxgrid.GridConnection - associate presence packet received (type=available, from=macpass@xgrid.cisco.com)

18:13:21.363 [main] DEBUG com.cisco.pxgrid.GridConnection - Controller version: 1.0.4.22

18:13:21.363 [main] DEBUG com.cisco.pxgrid.GridConnection - Pending account approval

Account enabled

18:15:01.395 [main] DEBUG com.cisco.pxgrid.internal.CapabilityManager - refreshing connection state...

18:15:02.583 [main] DEBUG com.cisco.pxgrid.internal.CapabilityManager - subscribed (topic=Core)

18:15:02.583 [main] DEBUG com.cisco.pxgrid.internal.CapabilityManager - done refreshing connection state.

18:15:02.584 [main] DEBUG com.cisco.pxgrid.internal.smack.NotificationHandlerSmack - refreshing connection state...

18:15:02.828 [main] INFO com.cisco.pxgrid.internal.smack.NotificationHandlerSmack - done refreshing connection state.

Connected

Filters (ex. '1.0.0.0/255.0.0.0,1234::/16...' or <enter> for no filter):

Start time (ex. '2015-01-31 13:00:00' or <enter> for no start time):

End time (ex. '2015-01-31 13:00:00' or <enter> for no end time):

pxGrid controller version=1.0.4.22

Going to url:https://palabise.fplab.local:8910/pxgrid/mnt/sd/getSessionListByTime

Download failed from https://palabise.fplab.local:8910/pxgrid/mnt/sd/getSessionListByTime:java.io.IOException: Server returned HTTP response code: 401 for URL: https://palabise.fplab.local:8910/pxgrid/mnt/sd/getSessionListByTime

18:15:10.036 [main] DEBUG com.cisco.pxgrid.internal.smack.NotificationHandlerSmack - clearing connection state...

18:15:10.036 [main] INFO com.cisco.pxgrid.internal.smack.NotificationHandlerSmack - cleared connection state...

Connection closed

 

Please let me know if you need more information in this regards.

2 ACCEPTED SOLUTIONS

Accepted Solutions
Highlighted
Cisco Employee

Re: pxGrid User/Password credentials based auth fails for download sessions

Hey Parag,

 

I am on PTO this week and returning on Aug. 27th, in the meanwhile, using the following reference: "Username and Password for pxGrid client: https://d1nmyq4gcgsfi5.cloudfront.net/fileMedia/5d7f78b8-c5ec-4b1d-a3f0-3629b4c83807/pxGrid_usernamePassword_JE08012016.pdf

 

Also what version of ISE are you using, unicast me the details.

 

Thanks,

John

jeppich@cisco.com

View solution in original post

Highlighted
Cisco Employee

Re: pxGrid User/Password credentials based auth fails for download sessions

You can go to www.cisco.com/go/pxgridpartner<> , you can find pxGrid 2.0 technical details and sample pxGrid 2.0 scripts up there as well.

View solution in original post

4 REPLIES 4
Highlighted
VIP Engager

Re: pxGrid User/Password credentials based auth fails for download sessions

I can't answer this question, but I can  ask if you are developing your own pxGrid integration why would you waste time on pxGrid 1.0 implementation?  Upgrade your deployment to 2.3+ and look to leverage pxGrid 2.0 REST APIs.  That is Cisco's direction.

 

https://developer.cisco.com/docs/pxgrid-api/#!overview

Highlighted
Cisco Employee

Re: pxGrid User/Password credentials based auth fails for download sessions

Hey Parag,

 

I am on PTO this week and returning on Aug. 27th, in the meanwhile, using the following reference: "Username and Password for pxGrid client: https://d1nmyq4gcgsfi5.cloudfront.net/fileMedia/5d7f78b8-c5ec-4b1d-a3f0-3629b4c83807/pxGrid_usernamePassword_JE08012016.pdf

 

Also what version of ISE are you using, unicast me the details.

 

Thanks,

John

jeppich@cisco.com

View solution in original post

Re: pxGrid User/Password credentials based auth fails for download sessions

Could someone please help to find "pxGrid 2.0 Sample Scripts".  There is a lot of documentation referred to them but I can not find these scripts nowhere.

 

Thank you in advance

 

 

Highlighted
Cisco Employee

Re: pxGrid User/Password credentials based auth fails for download sessions

You can go to www.cisco.com/go/pxgridpartner<> , you can find pxGrid 2.0 technical details and sample pxGrid 2.0 scripts up there as well.

View solution in original post