10-08-2015 03:35 AM - edited 03-10-2019 11:08 PM
Hi,
We've just built a new ISE VM, I have a question around the sponsor portal (already have the admin guide), does anyone know if V1.3 has the ability to export the newly created Guest User accounts? Our old ISE V1.1 does but I can't seem to find the option for V1.3
Any help at all would be greatly appreciated.
Regards
Neil
01-06-2016 07:06 AM
Hi Neil,
I asked for something similar couple months ago.
The only way I know till now is using ERS REST Based API for Guests.
As I'm newbie with REST FULL API I could not export all users in a only one request.
I'm trying to solve this with a Service Request that is still open.
Regards
Marcelo Castro
01-09-2016 12:36 AM
Hi Marcelo,
Please try this:
Method: GET
URI: https://<ISE IP ADDRESS>:9060/ers/config/guestuser/name/{name}
HTTP Accept header:
application/vnd.com.cisco.ise.identity.guestuser.2.0+xml
HTH - Jatin
04-18-2017 09:11 PM
Hey guys. I just tested this and was able to output the key info for my guests (in a test lab). This allowed me to massage the guest information into a format whereby it could be imported into my new ISE.
# WARNING - THIS IS A CRUDE METHOD WITH LITTLE ATTEMPT TO MAKE IT EFFICIENT #
Retrieve list of all guest user accounts:
root@kali:~# curl -k https://erstest:Password1@10.5.123.69:9060/ers/config/guestuser -H
root@kali:~# cat guestuserall.txt
{
"SearchResult" : {
"total" : 20,
"resources" : [ {
"id" : "00a1b3c1-24b4-11e7-bbb1-0050568f4d09",
"name" : "2vj93o",
"link" : {
"rel" : "self",
"href" : "https://10.5.123.69:9060/ers/config/guestuser/00a1b3c1-24b4-11e7-bbb1-0050568f4d09",
"type" : "application/xml"
}
}, {
"id" : "00bbcb71-24b4-11e7-bbb1-0050568f4d09",
"name" : "45b3vr",
"link" : {
"rel" : "self",
"href" : "https://10.5.123.69:9060/ers/config/guestuser/00bbcb71-24b4-11e7-bbb1-0050568f4d09",
"type" : "application/xml"
}
}, {
"id" : "00ad9aa1-24b4-11e7-bbb1-0050568f4d09",
"name" : "7zp47c",
Sanitise this into a list of guest user ids:
root@kali:~# cat guestuserall.txt | grep "id" | cut -d " " -f9 | sed 's|[",]||g' > guestuserids.txt
root@kali:~# more guestuserids.txt
00a1b3c1-24b4-11e7-bbb1-0050568f4d09
00bbcb71-24b4-11e7-bbb1-0050568f4d09
00ad9aa1-24b4-11e7-bbb1-0050568f4d09
00b5d801-24b4-11e7-bbb1-0050568f4d09
00bf26d1-24b4-11e7-bbb1-0050568f4d09
8a440772-1f48-11e7-bbb1-0050568f4d09
00b89721-24b4-11e7-bbb1-0050568f4d09
00c20d01-24b4-11e7-bbb1-0050568f4d09
00c4cc21-24b4-11e7-bbb1-0050568f4d09
00aab471-24b4-11e7-bbb1-0050568f4d09
00c78b41-24b4-11e7-bbb1-0050568f4d09
1c282f72-2487-11e7-bbb1-0050568f4d09
7608f600-1f46-11e7-bbb1-0050568f4d09
33817831-2486-11e7-bbb1-0050568f4d09
c82eb1b0-1f44-11e7-bbb1-0050568f4d09
00a4c101-24b4-11e7-bbb1-0050568f4d09
00ca4a61-24b4-11e7-bbb1-0050568f4d09
8c068872-24ad-11e7-bbb1-0050568f4d09
5f4baf70-2487-11e7-bbb1-0050568f4d09
d47a4fe1-2487-11e7-bbb1-0050568f4d09
root@kali:~#
For each guest user id, claw back full details of the guest (including password):
root@kali:~# for userids in $(cat guestuserids.txt); do curl -k https://erstest:Password1@10.5.123.69:9060/ers/config/guestuser/$userids -H Accept:application/json; done > guestusercredsraw.txt
root@kali:~# more guestusercredsraw.txt
{
"GuestUser" : {
"id" : "00a1b3c1-24b4-11e7-bbb1-0050568f4d09",
"name" : "2vj93o",
"guestType" : "Contractor (default)",
"status" : "AWAITING_INITIAL_LOGIN",
"sponsorUserName" : "admin",
"sponsorUserId" : "7e2956b2-24ad-11e7-bbb1-0050568f4d09",
"guestInfo" : {
"userName" : "2vj93o",
"password" : "7625",
"creationTime" : "04/18/2017 20:55",
"enabled" : false,
"notificationLanguage" : "English"
},
"guestAccessInfo" : {
"validDays" : 1,
"fromDate" : "04/19/2017 13:55",
"toDate" : "04/19/2017 23:59",
"location" : "San Jose"
},
"customFields" : {
},
"link" : {
"rel" : "self",
"href" : "https://10.5.123.69:9060/ers/config/guestuser/00a1b3c1-24b4-11e7-bbb1-0050568f4d09",
"type" : "application/xml"
}
}
}{
"GuestUser" : {
"id" : "00bbcb71-24b4-11e7-bbb1-0050568f4d09",
"name" : "45b3vr",
"guestType" : "Contractor (default)",
"status" : "AWAITING_INITIAL_LOGIN",
"sponsorUserName" : "
Optionally, sanitise this output to only show some major details about the guests:
root@kali:~# cat guestusercredsraw.txt | grep -E 'guestType|status|guestInfo|userName|password' > finalguestinfo.txt
root@kali:~# more finalguestinfo.txt
"guestType" : "Contractor (default)",
"status" : "AWAITING_INITIAL_LOGIN",
"guestInfo" : {
"userName" : "2vj93o",
"password" : "7625",
"guestType" : "Contractor (default)",
"status" : "AWAITING_INITIAL_LOGIN",
"guestInfo" : {
"userName" : "45b3vr",
"password" : "1527",
"guestType" : "Contractor (default)",
"status" : "AWAITING_INITIAL_LOGIN",
"guestInfo" : {
"userName" : "7zp47c",
"password" : "2889",
"guestType" : "Contractor (default)",
"status" : "AWAITING_INITIAL_LOGIN",
"guestInfo" : {
"userName" : "893yfs",
"password" : "0220",
"guestType" : "Contractor (default)",
"status" : "AWAITING_INITIAL_LOGIN",
"guestInfo" : {
"userName" : "9wge99",
"password" : "5922",
"guestType" : "Contractor (default)",
"status" : "EXPIRED",
"guestInfo" : {
"userName" : "djohnson",
"password" : "7124",
"guestType" : "Contractor (default)",
"status" : "AWAITING_INITIAL_LOGIN",
"guestInfo" : {
"userName" : "e9gi23",
"password" : "2454",
"guestType" : "Contractor (default)",
"status" : "AWAITING_INITIAL_LOGIN",
"guestInfo" : {
"userName" : "fs78v8",
"password" : "8752",
"guestType" : "Contractor (default)",
"status" : "AWAITING_INITIAL_LOGIN",
"guestInfo" : {
"userName" : "g896oy",
"password" : "5829",
"guestType" : "Contractor (default)",
"status" : "AWAITING_INITIAL_LOGIN",
"guestInfo" : {
"userName" : "h59ui7",
"password" : "5507",
"guestType" : "Contractor (default)",
"status" : "AWAITING_INITIAL_LOGIN",
"guestInfo" : {
"userName" : "ia764t",
"password" : "4446",
"guestType" : "Daily (default)",
"status" : "PENDING_APPROVAL",
"guestInfo" : {
"userName" : "jamesbond",
"password" : "9426",
"guestType" : "Daily (default)",
"status" : "EXPIRED",
"guestInfo" : {
"userName" : "johndond",
"password" : "6798",
"guestType" : "Daily (default)",
"status" : "AWAITING_INITIAL_LOGIN",
"guestInfo" : {
"userName" : "johnson",
"password" : "9945",
"guestType" : "Daily (default)",
"status" : "EXPIRED",
"guestInfo" : {
"userName" : "johnson4d",
"password" : "1919",
"guestType" : "Contractor (default)",
"status" : "AWAITING_INITIAL_LOGIN",
"guestInfo" : {
"userName" : "l5ms83",
"password" : "8638",
"guestType" : "Contractor (default)",
"status" : "AWAITING_INITIAL_LOGIN",
"guestInfo" : {
"userName" : "oyw528",
"password" : "7022",
"guestType" : "Contractor (default)",
"status" : "AWAITING_INITIAL_LOGIN",
"guestInfo" : {
"userName" : "rdazzle",
"password" : "1227",
"guestType" : "Daily (default)",
"status" : "PENDING_APPROVAL",
"guestInfo" : {
"userName" : "user12345",
"password" : "1889",
"guestType" : "Daily (default)",
"status" : "PENDING_APPROVAL",
"guestInfo" : {
"userName" : "user9876",
"password" : "7654",
root@kali:~#
08-02-2017 11:16 PM
Hi Jatin
Does the API work on version 1.2 of ise?
01-09-2016 12:35 AM
Hi Neil,
Unfortunately, it's not possble to export from sponsor portal. We've a PER open for this feature:
CSCty82007 ENH: Export Guest Accounts Configured in ISE
...and yes this can only be possible by REST API.
Regards,
Jatin
01-09-2016 05:33 AM
As others have indicated, you need to use the REST API to get all guest users out, however it's not possible with one request. First of, you will only get 100 at a time, ISE uses paging to give you the accounts one page at a time. If you feel like trying, i have posted a php script that does the stuff you need but for endpoints, not guests, but the concept is the same.
https://supportforums.cisco.com/discussion/12742536/ise-doubts-about-ers-rest-based-api-guests
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide