python with ISE

[Richie20]

Hi Everyone 

I got this error  while run this program 

Traceback (most recent call last):
File "C:\Users\ghibuser\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\connection.py", line 158, in _new_conn
conn = connection.create_connection(
File "C:\Users\ghibuser\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\util\connection.py", line 80, in create_connection
raise err
File "C:\Users\ghibuser\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\util\connection.py", line 70, in create_connection
sock.connect(sa)
TimeoutError: [WinError 10060] A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "C:\Users\ghibuser\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\connectionpool.py", line 597, in urlopen
httplib_response = self._make_request(conn, method, url,
File "C:\Users\ghibuser\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\connectionpool.py", line 343, in _make_request
self._validate_conn(conn)
File "C:\Users\ghibuser\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\connectionpool.py", line 839, in _validate_conn
conn.connect()
File "C:\Users\ghibuser\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\connection.py", line 301, in connect
conn = self._new_conn()
File "C:\Users\ghibuser\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\connection.py", line 167, in _new_conn
raise NewConnectionError(
urllib3.exceptions.NewConnectionError: <urllib3.connection.VerifiedHTTPSConnection object at 0x0000025AB6837FD0>: Failed to establish a new connection: [WinError 10060] A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "C:\Users\ghibuser\AppData\Local\Programs\Python\Python39\lib\site-packages\requests\adapters.py", line 439, in send
resp = conn.urlopen(
File "C:\Users\ghibuser\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\connectionpool.py", line 637, in urlopen
retries = retries.increment(method, url, error=e, _pool=self,
File "C:\Users\ghibuser\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\util\retry.py", line 399, in increment
raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='192.168.1.13', port=9060): Max retries exceeded with url: /ers/config/identitygroup?filter=name.EQ.Employee (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x0000025AB6837FD0>: Failed to establish a new connection: [WinError 10060] A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond'))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File "C:\Users\ghibuser\AppData\Local\Programs\Python\Python39\Scripts\path\to\ise\testing - Copy.py", line 14, in <module>
ise.get_identity_group(group='Employee')['response']
File "C:\Users\ghibuser\AppData\Local\Programs\Python\Python39\Scripts\path\to\ise\ise.py", line 1085, in get_identity_group
resp = self.ise.get(
File "C:\Users\ghibuser\AppData\Local\Programs\Python\Python39\lib\site-packages\requests\sessions.py", line 555, in get
return self.request('GET', url, **kwargs)
File "C:\Users\ghibuser\AppData\Local\Programs\Python\Python39\lib\site-packages\requests\sessions.py", line 542, in request
resp = self.send(prep, **send_kwargs)
File "C:\Users\ghibuser\AppData\Local\Programs\Python\Python39\lib\site-packages\requests\sessions.py", line 655, in send
r = adapter.send(request, **kwargs)
File "C:\Users\ghibuser\AppData\Local\Programs\Python\Python39\lib\site-packages\requests\adapters.py", line 516, in send
raise ConnectionError(e, request=request)
requests.exceptions.ConnectionError: HTTPSConnectionPool(host='192.168.1.13', port=9060): Max retries exceeded with url: /ers/config/identitygroup?filter=name.EQ.Employee (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x0000025AB6837FD0>: Failed to establish a new connection: [WinError 10060] A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond'))

this is the code 

# This file will be fixed with pytest or unittest.
# But untill then this will work as a crude non-automagic testbed. // Falk

import sys
import urllib3
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
sys.path.append('/path/to/ise/')

from ise import ERS
from pprint import pprint
from config import uri, endpoint, endpoint_group, user, identity_group, device, device_group, trustsec # noqa E402

ise = ERS(ise_node=['192.168.1.13'], ers_user=['ers-admin'], ers_pass=['oFlPRrne4'], verify=False,
disable_warnings=True, timeout=15, use_csrf=uri['use_csrf'])

def test_groups():
groups = ise.get_endpoint_groups()['response']
pprint(groups)

group = ise.get_endpoint_group('Juniper-Device')['response']
pprint(group)

def add_endpoint(endpoint):
test = ise.add_endpoint(endpoint['name'], endpoint['mac'], endpoint['group-id']) # noqa: E501
if test['error']:
print(test['response'])
else:
print('add_endpoint » OK')

def get_endpoints():
test = ise.get_endpoints(size=100, page=1)
if test['error']:
print(test['response'])
else:
print('get_endpoints » OK')

def get_endpoint(endpoint):
test = ise.get_endpoint(endpoint['mac'])
if test['error']:
print(test['response'])
else:
print('get_endpoint » OK')

def delete_endpoint(endpoint):
test = ise.delete_endpoint(endpoint['mac'])
if test['error']:
print(test['response'])
else:
print('delete_endpoint » OK')

def get_endpoint_groups(size):
test = ise.get_endpoint_groups(size=100, page=1)
if test['error']:
print(test['response'])
else:
print('get_endpoint_groups » OK')

def get_endpoint_group(endpoint_group):
test = ise.get_endpoint_group(endpoint_group['name'])
if test['error']:
print(test['response'])
else:
print('get_endpoint_group » OK')

def get_identity_groups():
test = ise.get_identity_groups(size=100, page=1)
if test['error']:
print(test['response'])
else:
print('get_identity_groups » OK')

def get_identity_group(identity_group):
test = ise.get_identity_group(identity_group['name'])
if test['error']:
print(test['response'])
else:
print('get_identity_group » OK')

identity_group_id = test['response']['id']

return identity_group_id

def add_user(user, identity_group_id):
user = ise.add_user(
user_id=user['user_id'],
password=user['password'],
user_group_oid=identity_group["respone"]["id"],
enable=user['enable'],
first_name=user['first_name'],
last_name=user['last_name']
)
if test['error']:
print(test['response'])
else:
print('add_user » OK')

def get_users():
test = ise.get_users(size=100, page=1)
if test['error']:
print(test['response'])
else:
print('get_users » OK')

def get_user(user):
test = ise.get_user(user['user_id'])
if test['error']:
print(test['response'])
else:
print('get_user » OK')

def delete_user(user):
test = ise.delete_user(user['user_id'])
if test['error']:
print(test['response'])
else:
print('delete_user » OK')

def get_device_groups():
test = ise.get_device_groups(size=100, page=1)
if test['error']:
print(test['response'])
else:
print('get_device_groups » OK')
device_group = test['response'][0][1]

return device_group

def get_device_group(device_group):
test = ise.get_device_group(device_group['oid'])
if test['error']:
print(test['response'])
else:
print('get_device_group » OK')

def add_device(device):
test = ise.add_device(
name=device['name'],
ip_address=device['ip_address'],
radius_key=device['radius_key'],
snmp_ro=device['snmp_ro'],
dev_group=device['dev_group'],
dev_location=device['dev_location'],
dev_type=device['dev_type'],
description=device['description'],
snmp_v=device['snmp_v'],
dev_profile=device['dev_profile']
)

if test['error']:
print(test['response'])
else:
print('add_device » OK')

def get_devices():
test_get = ise.get_devices(size=100, page=1)
if test_get['error']:
print(test_get['response'])
else:
print('get_devices » OK')

def get_device(device):
test = ise.get_device(device['name'])
if test['error']:
print(test['response'])
else:
print('get_device » OK')

def delete_device(device):
test = ise.delete_device(device['name'])
if test['error']:
print(test['response'])
else:
print('delete_device » OK')

def get_sgts():
test_get = ise.get_sgts(size=100, page=1)
if test_get['error']:
print(test_get['response'])
else:
print('get_sgts » OK')

def get_sgt(name):
test = ise.get_sgt(name)
if test['error']:
print(test['response'])
else:
print('get_sgt » OK')

def add_sgt(trustsec):
test = ise.add_sgt(name="Python_Unit_Test", description="Unit Tests", value=trustsec["test_sgt_value"],
return_object=True)
if test['error']:
print(test['response'])
else:
print('add_sgt » OK')
return test['response']['id']

def update_sgt(id, trustsec):
test = ise.update_sgt(id, name="Test_Unit_Python", description="Python Unit Tests",
value=trustsec["test_sgt_value"])
if test['error']:
print(test['response'])
else:
print('update_sgt » OK')

def delete_sgt(id):
test = ise.delete_sgt(id)
if test['error']:
print(test['response'])
else:
print('delete_sgt » OK')

def get_sgacls():
test_get = ise.get_sgacls(size=100, page=1)
if test_get['error']:
print(test_get['response'])
else:
print('get_sgacls » OK')

def get_sgacl(name):
test = ise.get_sgacl(name)
if test['error']:
print(test['response'])
else:
print('get_sgacl » OK')

def add_sgacl(trustsec):
test = ise.add_sgacl(name="Python_Unit_Test", description="Unit Tests", ip_version="IPV4",
acl_content=["permit ip"], return_object=True)
if test['error']:
print(test['response'])
else:
print('add_sgacl » OK')
return test['response']['id']

def update_sgacl(id, trustsec):
test = ise.update_sgacl(id, name="Test_Unit_Python", description="Python Unit Tests", ip_version="IPV4",
acl_content=["permit ip"])
if test['error']:
print(test['response'])
else:
print('update_sgacl » OK')

def delete_sgacl(id):
test = ise.delete_sgacl(id)
if test['error']:
print(test['response'])
else:
print('delete_sgacl » OK')

def get_emcs():
test_get = ise.get_egressmatrixcells(size=100, page=1)
if test_get['error']:
print(test_get['response'])
else:
print('get_egressmatrixcells » OK')

def get_emc(name):
test = ise.get_egressmatrixcell(name)
if test['error']:
print(test['response'])
else:
print('get_egressmatrixcell » OK')

def add_emc(trustsec):
test = ise.add_egressmatrixcell(trustsec["emc_source_sgt"], trustsec["emc_dest_sgt"], "PERMIT_IP",
return_object=True)
if test['error']:
print(test['response'])
else:
print('add_egressmatrixcell » OK')
return test['response']['id']

def update_emc(id, trustsec):
test = ise.update_egressmatrixcell(id, trustsec["emc_source_sgt"], trustsec["emc_dest_sgt"], "NONE",
description="Python Unit Tests",
acls=[trustsec["test_assign_acl"]])
if test['error']:
print(test['response'])
else:
print('update_egressmatrixcell » OK')

def delete_emc(id):
test = ise.delete_egressmatrixcell(id)
if test['error']:
print(test['response'])
else:
print('delete_egressmatrixcell » OK')

if __name__ == "__main__":

# Endpoint tests
add_endpoint(endpoint)
get_endpoints()
get_endpoint(endpoint)
delete_endpoint(endpoint)

# EndpointGroup tests
get_endpoint_groups(21)
get_endpoint_group(endpoint_group)

# User tests
get_identity_groups()
identity_group_id = ise.get_identity_group(group=identityGroups)
add_user(user, identity_group_id)
get_users()
get_user(user)
delete_user(user)

# Device tests
get_device_groups()
get_device_group(device_group)
add_device(device)
get_devices()
get_device(device)
delete_device(device)
# get_object() # TODO

# TrustSec SGT tests
get_sgts()
get_sgt("Unknown")
sgtid = add_sgt(trustsec)
update_sgt(sgtid, trustsec)
delete_sgt(sgtid)

# TrustSec SGACL tests
get_sgacls()
get_sgacl("Permit IP")
sgaclid = add_sgacl(trustsec)
update_sgacl(sgaclid, trustsec)
delete_sgacl(sgaclid)

# TrustSec Egress Matrix Cell (Policy) tests
get_emcs()
get_emc("Default egress rule")
emcid = add_emc(trustsec)
update_emc(emcid, trustsec)
delete_emc(emcid)

# This file will be fixed with pytest or unittest.
# But untill then this will work as a crude non-automagic testbed. // Falk

import sys
import urllib3
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
sys.path.append('/path/to/ise/')

from ise import ERS
from pprint import pprint
from config import uri, endpoint, endpoint_group, user, identity_group, device, device_group, trustsec # noqa E402

ise = ERS(ise_node=['192.168.1.13'], ers_user=['ers-admin'], ers_pass=['oFlPRrne4'], verify=False,
disable_warnings=True, timeout=15, use_csrf=uri['use_csrf'])

def test_groups():
groups = ise.get_endpoint_groups()['response']
pprint(groups)

group = ise.get_endpoint_group('Juniper-Device')['response']
pprint(group)

def add_endpoint(endpoint):
test = ise.add_endpoint(endpoint['name'], endpoint['mac'], endpoint['group-id']) # noqa: E501
if test['error']:
print(test['response'])
else:
print('add_endpoint » OK')

def get_endpoints():
test = ise.get_endpoints(size=100, page=1)
if test['error']:
print(test['response'])
else:
print('get_endpoints » OK')

def get_endpoint(endpoint):
test = ise.get_endpoint(endpoint['mac'])
if test['error']:
print(test['response'])
else:
print('get_endpoint » OK')

def delete_endpoint(endpoint):
test = ise.delete_endpoint(endpoint['mac'])
if test['error']:
print(test['response'])
else:
print('delete_endpoint » OK')

def get_endpoint_groups(size):
test = ise.get_endpoint_groups(size=100, page=1)
if test['error']:
print(test['response'])
else:
print('get_endpoint_groups » OK')

def get_endpoint_group(endpoint_group):
test = ise.get_endpoint_group(endpoint_group['name'])
if test['error']:
print(test['response'])
else:
print('get_endpoint_group » OK')

def get_identity_groups():
test = ise.get_identity_groups(size=100, page=1)
if test['error']:
print(test['response'])
else:
print('get_identity_groups » OK')

def get_identity_group(identity_group):
test = ise.get_identity_group(identity_group['name'])
if test['error']:
print(test['response'])
else:
print('get_identity_group » OK')

identity_group_id = test['response']['id']

return identity_group_id

def add_user(user, identity_group_id):
user = ise.add_user(
user_id=user['user_id'],
password=user['password'],
user_group_oid=identity_group["respone"]["id"],
enable=user['enable'],
first_name=user['first_name'],
last_name=user['last_name']
)
if test['error']:
print(test['response'])
else:
print('add_user » OK')

def get_users():
test = ise.get_users(size=100, page=1)
if test['error']:
print(test['response'])
else:
print('get_users » OK')

def get_user(user):
test = ise.get_user(user['user_id'])
if test['error']:
print(test['response'])
else:
print('get_user » OK')

def delete_user(user):
test = ise.delete_user(user['user_id'])
if test['error']:
print(test['response'])
else:
print('delete_user » OK')

def get_device_groups():
test = ise.get_device_groups(size=100, page=1)
if test['error']:
print(test['response'])
else:
print('get_device_groups » OK')
device_group = test['response'][0][1]

return device_group

def get_device_group(device_group):
test = ise.get_device_group(device_group['oid'])
if test['error']:
print(test['response'])
else:
print('get_device_group » OK')

def add_device(device):
test = ise.add_device(
name=device['name'],
ip_address=device['ip_address'],
radius_key=device['radius_key'],
snmp_ro=device['snmp_ro'],
dev_group=device['dev_group'],
dev_location=device['dev_location'],
dev_type=device['dev_type'],
description=device['description'],
snmp_v=device['snmp_v'],
dev_profile=device['dev_profile']
)

if test['error']:
print(test['response'])
else:
print('add_device » OK')

def get_devices():
test_get = ise.get_devices(size=100, page=1)
if test_get['error']:
print(test_get['response'])
else:
print('get_devices » OK')

def get_device(device):
test = ise.get_device(device['name'])
if test['error']:
print(test['response'])
else:
print('get_device » OK')

def delete_device(device):
test = ise.delete_device(device['name'])
if test['error']:
print(test['response'])
else:
print('delete_device » OK')

def get_sgts():
test_get = ise.get_sgts(size=100, page=1)
if test_get['error']:
print(test_get['response'])
else:
print('get_sgts » OK')

def get_sgt(name):
test = ise.get_sgt(name)
if test['error']:
print(test['response'])
else:
print('get_sgt » OK')

def add_sgt(trustsec):
test = ise.add_sgt(name="Python_Unit_Test", description="Unit Tests", value=trustsec["test_sgt_value"],
return_object=True)
if test['error']:
print(test['response'])
else:
print('add_sgt » OK')
return test['response']['id']

def update_sgt(id, trustsec):
test = ise.update_sgt(id, name="Test_Unit_Python", description="Python Unit Tests",
value=trustsec["test_sgt_value"])
if test['error']:
print(test['response'])
else:
print('update_sgt » OK')

def delete_sgt(id):
test = ise.delete_sgt(id)
if test['error']:
print(test['response'])
else:
print('delete_sgt » OK')

def get_sgacls():
test_get = ise.get_sgacls(size=100, page=1)
if test_get['error']:
print(test_get['response'])
else:
print('get_sgacls » OK')

def get_sgacl(name):
test = ise.get_sgacl(name)
if test['error']:
print(test['response'])
else:
print('get_sgacl » OK')

def add_sgacl(trustsec):
test = ise.add_sgacl(name="Python_Unit_Test", description="Unit Tests", ip_version="IPV4",
acl_content=["permit ip"], return_object=True)
if test['error']:
print(test['response'])
else:
print('add_sgacl » OK')
return test['response']['id']

def update_sgacl(id, trustsec):
test = ise.update_sgacl(id, name="Test_Unit_Python", description="Python Unit Tests", ip_version="IPV4",
acl_content=["permit ip"])
if test['error']:
print(test['response'])
else:
print('update_sgacl » OK')

def delete_sgacl(id):
test = ise.delete_sgacl(id)
if test['error']:
print(test['response'])
else:
print('delete_sgacl » OK')

def get_emcs():
test_get = ise.get_egressmatrixcells(size=100, page=1)
if test_get['error']:
print(test_get['response'])
else:
print('get_egressmatrixcells » OK')

def get_emc(name):
test = ise.get_egressmatrixcell(name)
if test['error']:
print(test['response'])
else:
print('get_egressmatrixcell » OK')

def add_emc(trustsec):
test = ise.add_egressmatrixcell(trustsec["emc_source_sgt"], trustsec["emc_dest_sgt"], "PERMIT_IP",
return_object=True)
if test['error']:
print(test['response'])
else:
print('add_egressmatrixcell » OK')
return test['response']['id']

def update_emc(id, trustsec):
test = ise.update_egressmatrixcell(id, trustsec["emc_source_sgt"], trustsec["emc_dest_sgt"], "NONE",
description="Python Unit Tests",
acls=[trustsec["test_assign_acl"]])
if test['error']:
print(test['response'])
else:
print('update_egressmatrixcell » OK')

def delete_emc(id):
test = ise.delete_egressmatrixcell(id)
if test['error']:
print(test['response'])
else:
print('delete_egressmatrixcell » OK')

if __name__ == "__main__":

# Endpoint tests
add_endpoint(endpoint)
get_endpoints()
get_endpoint(endpoint)
delete_endpoint(endpoint)

# EndpointGroup tests
get_endpoint_groups(21)
get_endpoint_group(endpoint_group)

# User tests
get_identity_groups()
identity_group_id = ise.get_identity_group(group=identityGroups)
add_user(user, identity_group_id)
get_users()
get_user(user)
delete_user(user)

# Device tests
get_device_groups()
get_device_group(device_group)
add_device(device)
get_devices()
get_device(device)
delete_device(device)
# get_object() # TODO

# TrustSec SGT tests
get_sgts()
get_sgt("Unknown")
sgtid = add_sgt(trustsec)
update_sgt(sgtid, trustsec)
delete_sgt(sgtid)

# TrustSec SGACL tests
get_sgacls()
get_sgacl("Permit IP")
sgaclid = add_sgacl(trustsec)
update_sgacl(sgaclid, trustsec)
delete_sgacl(sgaclid)

# TrustSec Egress Matrix Cell (Policy) tests
get_emcs()
get_emc("Default egress rule")
emcid = add_emc(trustsec)
update_emc(emcid, trustsec)
delete_emc(emcid)

Any suggestions are welcomed

[thomas]

There's a lot going on here.

1) you pasted the script twice

2) it's not properly formatted Python for quick copy and paste to try it

3) you're using custom include paths (sys.path.append('/path/to/ise/')) so cannot replicate your environment

4) Has a version of this code ever run before? If so, what changed? Go back to that, see what changed and narrow down to that.

5) dumping 373 lines of unformatted code is not necessary when the problem is clearly a Timeout
TimeoutError: [WinError 10060] A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond

6) What have you done to troubleshoot your Timeout issue? can you ping ISE? does a more basic python script talk to ISE and only this one fails?

7) You dumped 2 versions of this script - one with the CSRF option and one without. Which is it? Have you used CSRF before? Did it work? have you enabled it in ISE? or was it in a script you copied from somewhere?

[Richie20]

Hi @thomas 

I tried to work with this python  program for ISE https://pypi.org/project/ISE/ as i found . my ERS is enabled on ISE  and  can not ping ISE as well .

Can I use this   guest user  creation format https://developer.cisco.com/docs/identity-services-engine/3.0/#!create-guest-user for creating internal user on ISE as well  https://developer.cisco.com/docs/identity-services-engine/3.0/#!internal-user/create .

[thomas · Accepted solution]

---

@Richie20 wrote:

can not ping ISE as well .

---

This is clearly a networking (Layer 3) issue and not HTTP/S, ERS, or Python.

Please resolve your network issue.

@Richie20 wrote:
Can I use this guest user creation format

Yes. Please see ISE ERS API Examples and Guest & Sponsor API for the guestuser resource. I specifically talk about guestuser in our ISE REST API Webinar :

20:54 How to Enable ISE ERS (Extensible RESTful Services)
21:26 Admin Groups for REST Role-based Access Control (RBAC)
22:15 guestuser must be managed by a sponsor

[Richie20]

@thomas  i was trying to create Internal users . I want to know if this script is right or have to change it 

#!/usr/bin/env python
import requests
import json
import argparse
import ssl
import urllib3

urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

url = "https://192.168.10.18/ers/config/internaluser"

#Input Parameter
parser = argparse.ArgumentParser()
subparser = parser.add_subparsers(dest='command')
login = subparser.add_parser('login')
register = subparser.add_parser('register')
login.add_argument('--name', type=str, required=True)
login.add_argument('--password', type=str, required=True)
register.add_argument('--firstname', type=str, required=True)
register.add_argument('--lastname', type=str, required=True)
register.add_argument('--username', type=str, required=True)
register.add_argument('--email', type=str, required=True)
register.add_argument('--password', type=str, required=True)
register.add_argument('--identityGroups', type=str, required=True)
register.add_argument('--expiryeDate', type=str, required=True)
register.add_argument('--enablePasword', type=str, required=True)

args = parser.parse_args()
if args.command == 'login':
print('Logging in with username:', args.username,
'and password:', args.password)
elif args.command == 'register':
print('Creating username', args.username,
'for new member', args.firstname, args.lastname,
'with email:', args.email,
'with identityGroups:', args.identityGroups,
'with expiryDate:', args.identityGroups,
'and enablePassowrd:', args.enablePassword,



req_body_json = """ {{

"InternalUser" : {

"id" : "{}",

"name" : "{}",

"description" : "{}",

"enabled" : true,

"email" : "{}",

"password" : "{}",

"firstName" : "{}",

"lastName" : "{}",

"changePassword" : true,

"identityGroups" : "{}",

"expiryDateEnabled" : false,

"expiryDate" : "{}",

"enablePassword" : "{}",

"customAttributes" : {

"key1" : "value1",

"key2" : "value3"

},

"passwordIDStore" : "Internal Users"

}

}
}}
""".format(name,description,firstname,lastname,identityGroups,expirydate,enablePassword)

headers = {
'Content-Type': 'application/json',
'Accept': 'application/json',
'Authorization': 'Basic cmFjb2xhdHNlOm9GbFBScm5lNDU='
}

conn.request("POST", "/ers/config/guestuser/", headers=headers, body=req_body_json)

res = conn.getresponse()
data = res.read()

print("req_body_json")