We are using an external provider (TACACS+) for login. We are only quering /Devices and /InventoryDetails for now, the script I have to scrape the general inventory (/Devices) works as before, whereas what I use to scrape the network topology (/InventoryDetails) fails. I have verified it by hand using PowerShell and browsing to the API endpoint directly in Chrome. The user is a member of "NBI Read". The user is able to read the information (CDP Neighbors) when browsed via the WebGui.
... View more
After upgrading our CiscoPrime to 3.1 (3.1.6 to be exact) from 3.0.4, any calls we make to /InventoryDetails (webacs/api/v1/data/InventoryDetails) returns 403 - Forbidden. The same user with the same rights can without issue call webacs/api/v1/data/Devices as before. The error message returned in the response is: Access is denied to Prime Infrastructure. Any thoughts on what might be wrong here?
... View more
