Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 11 replies
  • Subscribers 28 subscribers
  • Views 29421 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

What are the current API Functions allowed? and few RADIUS authentication issues

akshay_r

We have two XG750s setup running in HA mode.

This is the current scenario:
1. Radius SSO is working perfectly and authentication works from the WiFi controller to the Sophos device.

2. We tried to enable Radius authentication for the captive portal. If its for like 100 users, the RADIUS authentication works, but as soon as we enable for all subnets that is around 5000 users together, the entire authentication service of the device hangs, that is neither is it able to handle User authentication nor the Adminstrator authentication (from the local DB on Sophos). Also, we get a communication with authentication server failed message on Captive Portal.
  In continuation to this, when the device is getting huge login requests, it is somehow getting queued to send to the RADIUS server but not reaching the server (we can see the requests are not coming from the Sophos XG) but the RADIUS authentication is working perfectly with the WiFi controller at this moment.

3. To prevent the usage of RADIUS server, we want to sync the password modified on this to the Sophos XG via the API feature available.
    Unfortunately, the API is not giving me any response for anything except LiveUserLogin and LiveUserLogout. These are the only two functions working, but the API documentation here provides a lot of functions. Am I missing out on some setting?

This is the URL I am querying to: https://<sophosip>:4444/webconsole/APIController?reqxml=<Request><User><Username>someusername</Username><Name>SomeName</Name></User>....{other params specified in API}</Request>

Please try to solve both my issue 2 and 3. 



This thread was automatically locked due to age.
Parents
  • 0

    AkshayRevankar,

    happy to see that someone has a couple of XG 750 running. I would like to know more about what modules and feature you are using.

    For the issue 2, I recommend you to open a ticket with support. Maybe there is a timeout for RADIUS. Why you do not use STAS for users authentication? Have a look at tail -f access_server.log  | grep username to check if you see something useful.

    For the issue 3, API works like a charm. I was able to create users, delete them and also querying.

    I woul recommend you to open 2 different threads, one for each question.

    Anyway for API Users query, use the following syntax:

    XGIP/.../APIController
    XGIP/.../APIController
    XGIP/.../APIController
    XGIP/.../APIController
    XGIP/.../APIController
    https://XGIP/webconsole/APIController?reqxml=<Request><Login><Username>admin</Username><Password>passwordhere</Password></Login><Get><SecurityPolicy></SecurityPolicy></Get></Request>

    Let us know.

  • 0 in reply to lferrara

    Thanks for the response,

    I forgot to mention, I have sent this xml request

    <Request><Login><Username>admin</Username><Password>mypasswordhere</Password></Login><Set><User><Username>test</Username><Name>Test</Name></User></Set></Request>

    Also tried with 

    <Request><Login><Username>admin</Username><Password>mypasswordhere</Password></Login><Set operation="add"><User><Username>test</Username><Name>Test</Name></User></Set></Request>

    and

    <Request><Login><Username>admin</Username><Password>mypasswordhere</Password></Login><Set operation="Add User"><User><Username>test</Username><Name>Test</Name></User></Set></Request>

     

    I get the reponse :

    <Response APIVersion="1605.1">
    <Login>
    <status>Authentication Successful</status>
    </Login>
    <User transactionid="">
    <Status code="500">Operation could not be performed on Entity.</Status>
    </User>
    </Response>

    Also, I am able to do some other settings change, but creating user and updating user is not working out. Could you post the XML request that you send for creating a user?

    Also, I will submit a ticket for the RADIUS issue
Reply
  • 0 in reply to lferrara

    Thanks for the response,

    I forgot to mention, I have sent this xml request

    <Request><Login><Username>admin</Username><Password>mypasswordhere</Password></Login><Set><User><Username>test</Username><Name>Test</Name></User></Set></Request>

    Also tried with 

    <Request><Login><Username>admin</Username><Password>mypasswordhere</Password></Login><Set operation="add"><User><Username>test</Username><Name>Test</Name></User></Set></Request>

    and

    <Request><Login><Username>admin</Username><Password>mypasswordhere</Password></Login><Set operation="Add User"><User><Username>test</Username><Name>Test</Name></User></Set></Request>

     

    I get the reponse :

    <Response APIVersion="1605.1">
    <Login>
    <status>Authentication Successful</status>
    </Login>
    <User transactionid="">
    <Status code="500">Operation could not be performed on Entity.</Status>
    </User>
    </Response>

    Also, I am able to do some other settings change, but creating user and updating user is not working out. Could you post the XML request that you send for creating a user?

    Also, I will submit a ticket for the RADIUS issue
Children
No Data