not login to Rest API ASA5525-X

[Alexander Khokhlov]

Hello
I'm trying to start using a REST API. 

I just can’t log in at https:10.78.8.3/api/objects/networkobjects

constantly logs "%ASA-6-113015: AAA user authentication Rejected : reason = Invalid password : local database : user = asaadmin1"

Hardware:   ASA5525, 8192 MB RAM, CPU Lynnfield 2394 MHz, 1 CPU (4 cores)

ASA Version 9.6(4)36

!

interface GigabitEthernet0/0

 nameif Inside

 security-level 100

 ip address 10.78.8.3 255.255.255.240

!

user-identity default-domain LOCAL

aaa authentication enable console LOCAL

aaa authentication http console LOCAL

aaa authentication serial console LOCAL

aaa authentication ssh console LOCAL

aaa authentication telnet console LOCAL

http server enable

http 0.0.0.0 0.0.0.0 Inside

!

username asaadmin1 password XXXXXXXXXXXXXXXXXXX nt-encrypted privilege 15

!

rest-api image disk0:/asa-restapi-132325-lfbff-k8.SPA

rest-api agent

[Cristian Matei]

Hi,

   Can you try using a regularly defined password hash, without "nt-encrypted"? So add a new username/password combination:

username xtz password xxxxx privilege 15

Regards,

Cristian Matei.

[Alexander Khokhlov]

I introduce

(config)#username asaadmin1 password asaadmin1 privilege 15

but it turns out like this (I can not remove the word "encrypted")

#sh run | include username
username asaadmin1 password xxxxxxxxx encrypted privilege 15

and take the error

[Cristian Matei]

Hi,

   There inna difference between "encrypted" and "nt-encrypted". Can you try configure a DIFFERENT username/password combination, like "user test password test privilege 15" and see if it works with this user? If it doesn't work, can you try and authenticate with this newly created user via SSH?

Regards,

Cristian Matei.

[Alexander Khokhlov]

user test helped - passed authentication.

but all browsers write like that  "INET_E_RESOURCE_NOT_FOUND"

[Cristian Matei]

Hi,

    So authentication works for both SSH and HTTP now? Based on the error, you're most probably trying to access something which is not to be found. Follow this guide to properly make use of the REST API.

Regards,

Cristian Matei.