Re: [Freeipa-devel] Web services in freeIPA
On 02/07/2014 04:33 AM, Alexandre Santos wrote:
Hi Martin,
I´ve tried your example and i get this error:
curl -v \
-H "Content-Type:application/json" \
-H "Accept:applicaton/json"\
--negotiate -u : \
--delegation always \
--cacert /etc/ipa/ca.crt \
-d '{"method":"user_find","params":[[""],{}],"id":0}' \
-X POST https://ipa/ipa/json
...
> User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7
NSS/3.13.6.0 zlib/1.2.3 libidn/1.18 libssh2/1.4.2
> Host: pi
> Content-Type:application/json
> Accept:applicaton/json
> Content-Length: 48
>
< HTTP/1.1 200 Success
< Date: Thu, 06 Feb 2014 16:42:26 GMT
< Server: Apache/2.2.15 (CentOS)
< Connection: close
< Transfer-Encoding: chunked
< Content-Type: application/json; charset=utf-8
<
{
"error": {
"code": 911,
"message": "Missing or invalid HTTP Referer, missing",
"name": {
"__base64__": "UmVmZXJlckVycm9y"
}
},
"id": null,
"principal": "admin@ipa",
"result": null,
"version": "3.0.0"
* Closing connection #0
Any suggestion?
That is the CSRF check.
Explicitly set the referrer header to the same URL as the web server and
you should be OK
Alexandre Santos
On 06 Feb 2014, at 15:12, Martin Kosek > wrote:
As Petr said, we do not have a proper documentation for using RPC for
controlling IPA. But I think you can start with looking at [1] to see the
template and try running our commands with "-vv" which will show you
how we
call the API:
$ ipa -vv user-show admin
Martin
[1]
http://adam.younglogic.com/2010/07/talking-to-freeipa-json-web-api-via-curl/
On 02/06/2014 04:04 PM, Alexandre Santos wrote:
Is there any examples that can guide me.
Thanks
Alexandre Santos
On 06 Feb 2014, at 14:33, Petr Vobornik > wrote:
On 6.2.2014 15:22, Alexandre Santos wrote:
Hi,
I´m starting in freeIPA and I would like to know what web apps are
available for use, like create user, delete user and so on. I´ve
seen that when i use the command "ipa -vv user-add" a url for the
app if given.
I would like to know if there is any information about that.
Thanks
Alexandre Santos
The url you saw is most-likely for XML RPC API.
You can check:
https://hostname/ipa/xml - XML RPC API
https://hostname/ipa/json - JSON RPC API
https://hostname/ipa/session/xml XML RPC API with session support
https://hostname/ipa/session/json JSON RPC API with session support
https://hostname/ipa/ui - Web UI
https://hostname/ipa/config/unauthorized.html - some config and
error pages
We don't have docs for the APIs yet.
--
Petr Vobornik
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] Web services in freeIPA
As this is not documented, I am thinking the easiest approach will be to open
Web UI and see what JSON requests it sends to IPA for desired actions. I tested
that for example with Chrome developer tools and I could easily see that for
showing a particular user it uses following JSON:
{"method":"user_show","params":[["fbar"],{"all":true,"rights":true}]}
or for user-del:
{"method":"user_del","params":[["fbar"],{}]}
Martin
On 02/10/2014 10:13 AM, Alexandre Santos wrote:
> I have to install the new version, I have the 3.2 installed.
>
> I have to integrate the web apps to my web administration site, so i can add,
> remove, update and find users.
>
> Thanks
>
> Alexandre Santos
>
> On 07 Feb 2014, at 15:15, Alexandre Santos wrote:
>
>> Thanks, i´m new to this json. How can i find the methods available and there
>> options?
>>
>> Thanks
>>
>> Alexandre Santos
>>
>>
>> On 07 Feb 2014, at 09:45, Alexander Bokovoy wrote:
>>
>>> On Fri, 07 Feb 2014, Alexandre Santos wrote:
Hi Martin,
I´ve tried your example and i get this error:
curl -v \
-H "Content-Type:application/json" \
-H "Accept:applicaton/json"\
--negotiate -u : \
--delegation always \
--cacert /etc/ipa/ca.crt \
-d '{"method":"user_find","params":[[""],{}],"id":0}' \
-X POST https://ipa/ipa/json
...
> User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7
> NSS/3.13.6.0 zlib/1.2.3 libidn/1.18 libssh2/1.4.2
> Host: pi
> Content-Type:application/json
> Accept:applicaton/json
> Content-Length: 48
>
< HTTP/1.1 200 Success
< Date: Thu, 06 Feb 2014 16:42:26 GMT
< Server: Apache/2.2.15 (CentOS)
< Connection: close
< Transfer-Encoding: chunked
< Content-Type: application/json; charset=utf-8
<
{
"error": {
"code": 911,
"message": "Missing or invalid HTTP Referer, missing",
"name": {
"__base64__": "UmVmZXJlckVycm9y"
}
},
"id": null,
"principal": “admin@ipa",
"result": null,
"version": "3.0.0"
* Closing connection #0
Any suggestion?
>>> You need to set the referrer.
>>>
>>> -H referer:https://ipa.mybox/ipa/ui/index.html
>>> --
>>> / Alexander Bokovoy
>>
>
>
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] Web services in freeIPA
I have to install the new version, I have the 3.2 installed.
I have to integrate the web apps to my web administration site, so i can add,
remove, update and find users.
Thanks
Alexandre Santos
On 07 Feb 2014, at 15:15, Alexandre Santos wrote:
> Thanks, i´m new to this json. How can i find the methods available and there
> options?
>
> Thanks
>
> Alexandre Santos
>
>
> On 07 Feb 2014, at 09:45, Alexander Bokovoy wrote:
>
>> On Fri, 07 Feb 2014, Alexandre Santos wrote:
>>> Hi Martin,
>>>
>>> I´ve tried your example and i get this error:
>>>
>>> curl -v \
>>>-H "Content-Type:application/json" \
>>>-H "Accept:applicaton/json"\
>>>--negotiate -u : \
>>>--delegation always \
>>>--cacert /etc/ipa/ca.crt \
>>>-d '{"method":"user_find","params":[[""],{}],"id":0}' \
>>>-X POST https://ipa/ipa/json
>>>
>>> ...
>>>
User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7
NSS/3.13.6.0 zlib/1.2.3 libidn/1.18 libssh2/1.4.2
Host: pi
Content-Type:application/json
Accept:applicaton/json
Content-Length: 48
>>> < HTTP/1.1 200 Success
>>> < Date: Thu, 06 Feb 2014 16:42:26 GMT
>>> < Server: Apache/2.2.15 (CentOS)
>>> < Connection: close
>>> < Transfer-Encoding: chunked
>>> < Content-Type: application/json; charset=utf-8
>>> <
>>> {
>>> "error": {
>>> "code": 911,
>>> "message": "Missing or invalid HTTP Referer, missing",
>>> "name": {
>>> "__base64__": "UmVmZXJlckVycm9y"
>>> }
>>> },
>>> "id": null,
>>> "principal": “admin@ipa",
>>> "result": null,
>>> "version": "3.0.0"
>>> * Closing connection #0
>>>
>>>
>>> Any suggestion?
>> You need to set the referrer.
>>
>> -H referer:https://ipa.mybox/ipa/ui/index.html
>> --
>> / Alexander Bokovoy
>
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] Web services in freeIPA
On 7.2.2014 10:33, Alexandre Santos wrote:
Hi Martin,
I´ve tried your example and i get this error:
curl -v \
-H "Content-Type:application/json" \
-H "Accept:applicaton/json"\
--negotiate -u : \
--delegation always \
--cacert /etc/ipa/ca.crt \
-d '{"method":"user_find","params":[[""],{}],"id":0}' \
-X POST https://ipa/ipa/json
Just add
-H "Referer: https://ipa/ipa/json"; \
FreeIPA server checks the referer to prevent CSRF.
...
> User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7
NSS/3.13.6.0 zlib/1.2.3 libidn/1.18 libssh2/1.4.2
> Host: pi
> Content-Type:application/json
> Accept:applicaton/json
> Content-Length: 48
>
< HTTP/1.1 200 Success
< Date: Thu, 06 Feb 2014 16:42:26 GMT
< Server: Apache/2.2.15 (CentOS)
< Connection: close
< Transfer-Encoding: chunked
< Content-Type: application/json; charset=utf-8
<
{
"error": {
"code": 911,
"message": "Missing or invalid HTTP Referer, missing",
"name": {
"__base64__": "UmVmZXJlckVycm9y"
}
},
"id": null,
"principal": “admin@ipa",
"result": null,
"version": "3.0.0"
* Closing connection #0
Any suggestion?
Alexandre Santos
On 06 Feb 2014, at 15:12, Martin Kosek mailto:mko...@redhat.com>> wrote:
As Petr said, we do not have a proper documentation for using RPC for
controlling IPA. But I think you can start with looking at [1] to see the
template and try running our commands with "-vv" which will show you
how we
call the API:
$ ipa -vv user-show admin
Martin
[1]
http://adam.younglogic.com/2010/07/talking-to-freeipa-json-web-api-via-curl/
On 02/06/2014 04:04 PM, Alexandre Santos wrote:
Is there any examples that can guide me.
Thanks
Alexandre Santos
On 06 Feb 2014, at 14:33, Petr Vobornik mailto:pvobo...@redhat.com>> wrote:
On 6.2.2014 15:22, Alexandre Santos wrote:
Hi,
I´m starting in freeIPA and I would like to know what web apps are
available for use, like create user, delete user and so on. I´ve
seen that when i use the command "ipa -vv user-add” a url for the
app if given.
I would like to know if there is any information about that.
Thanks
Alexandre Santos
The url you saw is most-likely for XML RPC API.
You can check:
https://hostname/ipa/xml - XML RPC API
https://hostname/ipa/json - JSON RPC API
https://hostname/ipa/session/xml XML RPC API with session support
https://hostname/ipa/session/json JSON RPC API with session support
https://hostname/ipa/ui - Web UI
https://hostname/ipa/config/unauthorized.html - some config and
error pages
We don't have docs for the APIs yet.
--
Petr Vobornik
--
Petr Vobornik
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] Web services in freeIPA
On Fri, 07 Feb 2014, Alexandre Santos wrote:
Hi Martin,
I´ve tried your example and i get this error:
curl -v \
-H "Content-Type:application/json" \
-H "Accept:applicaton/json"\
--negotiate -u : \
--delegation always \
--cacert /etc/ipa/ca.crt \
-d '{"method":"user_find","params":[[""],{}],"id":0}' \
-X POST https://ipa/ipa/json
...
User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.13.6.0
zlib/1.2.3 libidn/1.18 libssh2/1.4.2
Host: pi
Content-Type:application/json
Accept:applicaton/json
Content-Length: 48
< HTTP/1.1 200 Success
< Date: Thu, 06 Feb 2014 16:42:26 GMT
< Server: Apache/2.2.15 (CentOS)
< Connection: close
< Transfer-Encoding: chunked
< Content-Type: application/json; charset=utf-8
<
{
"error": {
"code": 911,
"message": "Missing or invalid HTTP Referer, missing",
"name": {
"__base64__": "UmVmZXJlckVycm9y"
}
},
"id": null,
"principal": “admin@ipa",
"result": null,
"version": "3.0.0"
* Closing connection #0
Any suggestion?
You need to set the referrer.
-H referer:https://ipa.mybox/ipa/ui/index.html
--
/ Alexander Bokovoy
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] Web services in freeIPA
Hi Martin,
I´ve tried your example and i get this error:
curl -v \
-H "Content-Type:application/json" \
-H "Accept:applicaton/json"\
--negotiate -u : \
--delegation always \
--cacert /etc/ipa/ca.crt \
-d '{"method":"user_find","params":[[""],{}],"id":0}' \
-X POST https://ipa/ipa/json
...
> User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.13.6.0
> zlib/1.2.3 libidn/1.18 libssh2/1.4.2
> Host: pi
> Content-Type:application/json
> Accept:applicaton/json
> Content-Length: 48
>
< HTTP/1.1 200 Success
< Date: Thu, 06 Feb 2014 16:42:26 GMT
< Server: Apache/2.2.15 (CentOS)
< Connection: close
< Transfer-Encoding: chunked
< Content-Type: application/json; charset=utf-8
<
{
"error": {
"code": 911,
"message": "Missing or invalid HTTP Referer, missing",
"name": {
"__base64__": "UmVmZXJlckVycm9y"
}
},
"id": null,
"principal": “admin@ipa",
"result": null,
"version": "3.0.0"
* Closing connection #0
Any suggestion?
Alexandre Santos
On 06 Feb 2014, at 15:12, Martin Kosek wrote:
> As Petr said, we do not have a proper documentation for using RPC for
> controlling IPA. But I think you can start with looking at [1] to see the
> template and try running our commands with "-vv" which will show you how we
> call the API:
>
> $ ipa -vv user-show admin
>
> Martin
>
> [1]
> http://adam.younglogic.com/2010/07/talking-to-freeipa-json-web-api-via-curl/
>
> On 02/06/2014 04:04 PM, Alexandre Santos wrote:
>>
>> Is there any examples that can guide me.
>>
>> Thanks
>> Alexandre Santos
>>
>> On 06 Feb 2014, at 14:33, Petr Vobornik wrote:
>>
>>> On 6.2.2014 15:22, Alexandre Santos wrote:
Hi,
I´m starting in freeIPA and I would like to know what web apps are
available for use, like create user, delete user and so on. I´ve seen that
when i use the command "ipa -vv user-add” a url for the app if given.
I would like to know if there is any information about that.
Thanks
Alexandre Santos
>>>
>>> The url you saw is most-likely for XML RPC API.
>>>
>>> You can check:
>>>
>>> https://hostname/ipa/xml - XML RPC API
>>> https://hostname/ipa/json - JSON RPC API
>>> https://hostname/ipa/session/xml XML RPC API with session support
>>> https://hostname/ipa/session/json JSON RPC API with session support
>>> https://hostname/ipa/ui - Web UI
>>> https://hostname/ipa/config/unauthorized.html - some config and error pages
>>>
>>> We don't have docs for the APIs yet.
>>> --
>>> Petr Vobornik
>>
>
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] Web services in freeIPA
On 02/06/2014 04:29 PM, Dmitri Pal wrote: > On 02/06/2014 10:12 AM, Martin Kosek wrote: >> As Petr said, we do not have a proper documentation for using RPC for >> controlling IPA. But I think you can start with looking at [1] to see the >> template and try running our commands with "-vv" which will show you how we >> call the API: >> >> $ ipa -vv user-show admin > > Are we still suggesting using XML interface? > I though we were planning to prefer JSON rather than XML, something > changed here? No, we prefer JSON. In currently developed FreeIPA version (3.4) we already switched to it by default [1]. So if the command above is run in this version, it will show the actual JSON-RPC query asked on the server. If run in older FreeIPA client, it will still use the XML-RPC. Martin [1] https://fedorahosted.org/freeipa/ticket/3299 ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] Web services in freeIPA
On 02/06/2014 10:12 AM, Martin Kosek wrote: > As Petr said, we do not have a proper documentation for using RPC for > controlling IPA. But I think you can start with looking at [1] to see the > template and try running our commands with "-vv" which will show you how we > call the API: > > $ ipa -vv user-show admin Are we still suggesting using XML interface? I though we were planning to prefer JSON rather than XML, something changed here? > > Martin > > [1] > http://adam.younglogic.com/2010/07/talking-to-freeipa-json-web-api-via-curl/ > > On 02/06/2014 04:04 PM, Alexandre Santos wrote: >> Is there any examples that can guide me. >> >> Thanks >> Alexandre Santos >> >> On 06 Feb 2014, at 14:33, Petr Vobornik wrote: >> >>> On 6.2.2014 15:22, Alexandre Santos wrote: Hi, I´m starting in freeIPA and I would like to know what web apps are available for use, like create user, delete user and so on. I´ve seen that when i use the command "ipa -vv user-add” a url for the app if given. I would like to know if there is any information about that. Thanks Alexandre Santos >>> The url you saw is most-likely for XML RPC API. >>> >>> You can check: >>> >>> https://hostname/ipa/xml - XML RPC API >>> https://hostname/ipa/json - JSON RPC API >>> https://hostname/ipa/session/xml XML RPC API with session support >>> https://hostname/ipa/session/json JSON RPC API with session support >>> https://hostname/ipa/ui - Web UI >>> https://hostname/ipa/config/unauthorized.html - some config and error pages >>> >>> We don't have docs for the APIs yet. >>> -- >>> Petr Vobornik > ___ > Freeipa-devel mailing list > Freeipa-devel@redhat.com > https://www.redhat.com/mailman/listinfo/freeipa-devel -- Thank you, Dmitri Pal Sr. Engineering Manager for IdM portfolio Red Hat Inc. --- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] Web services in freeIPA
As Petr said, we do not have a proper documentation for using RPC for controlling IPA. But I think you can start with looking at [1] to see the template and try running our commands with "-vv" which will show you how we call the API: $ ipa -vv user-show admin Martin [1] http://adam.younglogic.com/2010/07/talking-to-freeipa-json-web-api-via-curl/ On 02/06/2014 04:04 PM, Alexandre Santos wrote: > > Is there any examples that can guide me. > > Thanks > Alexandre Santos > > On 06 Feb 2014, at 14:33, Petr Vobornik wrote: > >> On 6.2.2014 15:22, Alexandre Santos wrote: >>> Hi, >>> >>> I´m starting in freeIPA and I would like to know what web apps are >>> available for use, like create user, delete user and so on. I´ve seen that >>> when i use the command "ipa -vv user-add” a url for the app if given. >>> >>> I would like to know if there is any information about that. >>> >>> Thanks >>> >>> Alexandre Santos >>> >> >> The url you saw is most-likely for XML RPC API. >> >> You can check: >> >> https://hostname/ipa/xml - XML RPC API >> https://hostname/ipa/json - JSON RPC API >> https://hostname/ipa/session/xml XML RPC API with session support >> https://hostname/ipa/session/json JSON RPC API with session support >> https://hostname/ipa/ui - Web UI >> https://hostname/ipa/config/unauthorized.html - some config and error pages >> >> We don't have docs for the APIs yet. >> -- >> Petr Vobornik > ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] Web services in freeIPA
Is there any examples that can guide me. Thanks Alexandre Santos On 06 Feb 2014, at 14:33, Petr Vobornik wrote: > On 6.2.2014 15:22, Alexandre Santos wrote: >> Hi, >> >> I´m starting in freeIPA and I would like to know what web apps are available >> for use, like create user, delete user and so on. I´ve seen that when i use >> the command "ipa -vv user-add” a url for the app if given. >> >> I would like to know if there is any information about that. >> >> Thanks >> >> Alexandre Santos >> > > The url you saw is most-likely for XML RPC API. > > You can check: > > https://hostname/ipa/xml - XML RPC API > https://hostname/ipa/json - JSON RPC API > https://hostname/ipa/session/xml XML RPC API with session support > https://hostname/ipa/session/json JSON RPC API with session support > https://hostname/ipa/ui - Web UI > https://hostname/ipa/config/unauthorized.html - some config and error pages > > We don't have docs for the APIs yet. > -- > Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] Web services in freeIPA
Thanks, I think I have what i need. Best regards On 06 Feb 2014, at 14:33, Petr Vobornik wrote: > On 6.2.2014 15:22, Alexandre Santos wrote: >> Hi, >> >> I´m starting in freeIPA and I would like to know what web apps are available >> for use, like create user, delete user and so on. I´ve seen that when i use >> the command "ipa -vv user-add” a url for the app if given. >> >> I would like to know if there is any information about that. >> >> Thanks >> >> Alexandre Santos >> > > The url you saw is most-likely for XML RPC API. > > You can check: > > https://hostname/ipa/xml - XML RPC API > https://hostname/ipa/json - JSON RPC API > https://hostname/ipa/session/xml XML RPC API with session support > https://hostname/ipa/session/json JSON RPC API with session support > https://hostname/ipa/ui - Web UI > https://hostname/ipa/config/unauthorized.html - some config and error pages > > We don't have docs for the APIs yet. > -- > Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
Re: [Freeipa-devel] Web services in freeIPA
On 6.2.2014 15:22, Alexandre Santos wrote: Hi, I´m starting in freeIPA and I would like to know what web apps are available for use, like create user, delete user and so on. I´ve seen that when i use the command "ipa -vv user-add” a url for the app if given. I would like to know if there is any information about that. Thanks Alexandre Santos The url you saw is most-likely for XML RPC API. You can check: https://hostname/ipa/xml - XML RPC API https://hostname/ipa/json - JSON RPC API https://hostname/ipa/session/xml XML RPC API with session support https://hostname/ipa/session/json JSON RPC API with session support https://hostname/ipa/ui - Web UI https://hostname/ipa/config/unauthorized.html - some config and error pages We don't have docs for the APIs yet. -- Petr Vobornik ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
[Freeipa-devel] Web services in freeIPA
Hi, I´m starting in freeIPA and I would like to know what web apps are available for use, like create user, delete user and so on. I´ve seen that when i use the command "ipa -vv user-add” a url for the app if given. I would like to know if there is any information about that. Thanks Alexandre Santos ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
