Re: [opennms-discuss] REST API account problem

[Ostock,David J. <OST...@ai...>]

I did quite a bit more testing and found that when I change the admin password from the default "admin" to anything else, console access continues to work fine, but REST API calls fail with HTTP 401 bad credentials errors.

I restarted OpenNMS and tried again and am able to login to the console, but REST calls fail.  I tried reinstalling fresh installs of version 18.0.2 and also 16.0.4, but not luck.

When I change the admin password back to "admin" the REST API calls work.

Does anyone know if there is a separate config file to specify admin account and password for the REST API?

I tested with the following configs
Windows 2012 R2
JDK: 8u102
PostgreSQL: 9.5.4-2
OpenNMS: 18.0.2

Windows 7 SP1
JDK: 8u102 and 8u112
PostgreSQL: 9.5.4-2
OpenNMS: 18.0.2 and 16.0.4

Thanks,
Dave

From: Ostock,David J. [mailto:OST...@ai...]
Sent: Wednesday, October 19, 2016 4:43 PM
To: ope...@li...
Subject: [opennms-discuss] REST API account problem


This sender failed our fraud detection checks and may not be who they appear to be. Learn about spoofing<http://aka.ms/LearnAboutSpoofing>

Feedback<http://aka.ms/SafetyTipsFeedback>

I'm running OpenNMS 18.0.2 on Windows 2012 R2 installed using the Windows installer and am having a problem with the REST API where it seems to ignore changes to accounts and passwords.

I have a few PowerShell scripts that use the OpenNMS REST API and work fine with the default admin account credentials.

I changed the admin password in the console under admin/change password and also restarted OpenNMS for good measure.  The password change worked fine for console access, but my scripts failed with error: "HTTP ERROR 401 Problem accessing /opennms/rest/nodes. Reason:Bad credentials".  Interestingly, the default password still works for the REST API after being changed in the console.

I tried adding an additional account and added it to the admin group in the console.  I also added it to role.admin.users and role.rest.users in magic-users.properties.  The account worked fine for console access, but the scripts failed with the same bad credentials error.

Is there a config file beyond users.xml and magic-users.properties to set user accounts and password for the REST API?  I searched the config files but didn't find anything obvious.  I also searched the docs and mailing list archive but didn't find anything relevant.

Any suggestions on next steps?

Thanks,
Dave