Solved: TACACS Server API is not working

ShuningWu14393 · ‎07-14-2022

We try to access the TACACS Server API and collect the server information, following this example:

https://www.cisco.com/c/en/us/td/docs/routers/nfvis/user_guide/b-api-reference-for-cisco-enterprise-nfvis/b-api-reference-for-cisco-enterprise-nfvis_chapter_010000.html#get-tacacs-example011

However, after submitting the GET request to

/api/config/security_servers/tacacs-server?deep

, we receive this error message:

'<!--**************************************************-->\n<!-- Copyright (c) 2009 Cisco Systems, Inc.-->\n<!-- All rights reserved.-->\n<!--**************************************************-->\n\n<html><head/><title>ACS: Error</title><body><H1>ACS: Resource not found or internal server error</H1></body></html>\n<br />ErrorCode: 404\n\n'

Why does this happen? And how can we solve this error?

hslai · ‎07-16-2022

As ahollifield said, ACS 5.x has already reached EoS/EoL.

I got HTTP 404 if REST not enabled via the ACS admin CLI.

Enabling the REST Web Interface on ACS CLI

You must enable the web interface on ACS before you can use the REST web service. To enable the web interface on ACS, from the ACS CLI, enter:

acs config-web-interface rest enable

View solution in original post

Damien Miller · ‎07-14-2022

What are you trying to connect to and poll with this API? The link and API you shared is for the ENFV platforms like the ENCS 5000 where you virtualize network platforms.

ACS and ISE have their own API documentation and resources.

ShuningWu14393 · ‎07-15-2022

Thanks, Damien! Could you point us to the correct ACS API documentation?

ahollifield · ‎07-15-2022

You are using ACS? Or ISE? https://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-8-1/sdk/acs_sdk.html

https://www.cisco.com/c/en/us/products/collateral/security/secure-access-control-system/eos-eol-c51-738197.html

ShuningWu14393 · ‎07-15-2022

ACS. We also find the second link to the API document, but the API still shows 404 client error below:

HTTPError: 404 Client Error: Not Found for url: https://172.10.100.21/Rest/Identity/User/

Do you know the reason for this?

Damien Miller · ‎07-15-2022

Which version of ACS are you running?

ShuningWu14393 · ‎07-15-2022

Secure Access Control System (ACS) 5.8

hslai · ‎07-16-2022

As ahollifield said, ACS 5.x has already reached EoS/EoL.

I got HTTP 404 if REST not enabled via the ACS admin CLI.

Enabling the REST Web Interface on ACS CLI

You must enable the web interface on ACS before you can use the REST web service. To enable the web interface on ACS, from the ACS CLI, enter:

acs config-web-interface rest enable

ShuningWu14393 · ‎07-18-2022

Thanks! We will check this with the system admin.