ptown Respected Contributor.
Respected Contributor.
1633 views

REST API logon

I'm working on building an IDM REST driver to integrate with Advanced Authentication. I've made some REST calls successfully but can't get through the simple logon. Can anyone share? It is probably the body of the call that is incorrect. Thanks for any tips.

Peggy Townsend Novacoast
0 Likes
5 Replies
Micro Focus Expert
Micro Focus Expert

Re: REST API logon

Hi Peggy,

In combination with the API documentation (https://www.netiq.com/documentation/advanced-authentication-56/apidoc/data/apidoc.html#header-howto) the tool should help you to learn and test your API calls: ftp://ftp.novell.com/pub/SLAnalyzer/SLAnalyzer.exe
User manual: ftp://ftp.novell.com/pub/SLAnalyzer/SLAnalyzer%20User%20Guide.pdf
Go to the menu Tools - AAF 5.x REST Client
0 Likes
Community Manager kgroneman Community Manager
Community Manager

Re: REST API logon

Thanks for posting that!
--
My computer used to beat me at chess all the time, but then I changed the competition to kick boxing.......
0 Likes
Knowledge Partner
Knowledge Partner

Re: REST API logon

On 10/31/2017 7:26 AM, teysg wrote:
>
> Hi Peggy,
>
> In combination with the API documentation
> (https://www.netiq.com/documentation/advanced-authentication-56/apidoc/data/apidoc.html#header-howto)
> the tool should help you to learn and test your API calls:
> ftp://ftp.novell.com/pub/SLAnalyzer/SLAnalyzer.exe


I think Peggy's question was in a different direction.

This is a neat tool, bundling a bunch of support tools together and I
like it. But that would be to test that the Endpoint is working. I.e.
NAAF is listening.

Peggy's issue is from say 'curl' connecting, authenticating, so she can
make REST calls.

This tool will not help for that.

To rephrase her question:

What is the authentication mechanism over REST that NAAF supports?

Basic header auth?
OAuth2?
Username/password in the URL?
Specific service to get a timed (session) token t use in the URL?

0 Likes
Micro Focus Expert
Micro Focus Expert

Re: REST API logon

geoffc;2469487 wrote:
What is the authentication mechanism over REST that NAAF supports?


Authentication against REST.
0 Likes
ptown Respected Contributor.
Respected Contributor.

Re: REST API logon

I did figure out the commands needed to login using Postman. I have not figured out how to do this inside the REST driver. How would you include that in a driver? Here are the commands:

To create an endpoint session:
https://10.231.93.80/api/v1/endpoints/e34feb3ec01711e7b1ae005056996a85/sessions

{

"salt": "2615c070937935246c6a91df70a8eb672b21d842a225621c9797a83bedf00a7b",

"endpoint_secret_hash": "db1862075ccb115836f6c85abe8bd06f9b73982e26e975c8070584c382fc9a54"

}

To create a logon:
https://10.231.93.80/api/v1/logon

{

"method_id": "PASSWORD:1",

"user_name": "LOCAL\\SERVICE-IDM2AA",

"event": "AdminUI",

"endpoint_session_id": "lGJDUg4iVP3k16dwFRycAb992hGln7m7"

}

DoLogon
https://10.231.93.80/api/v1/logon/fcbovTFChMIwjjcSWZZ8krOyozaqfnGe/do_logon

{

"endpoint_session_id": "VhzrRwJfg2ywu5R668yVgXAU5ez92UYJ",

"response": {

"answer": "Password-goes-here"

}

}

Peggy Townsend Novacoast
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.