Does anyone know of a way to use active directory credentials to work with the API?
Local accounts work, however I get a 403 client error when trying with AD credentials. URL is server:17778/.../Query
Brutally honest speak from me: I don't use anything except the PowerShell if there's any alternative and that supports the -Trusted parameter which passes through the current user's credentials to the SolarWinds Information Service. When you start talking about python, perl, curl, etc. I take a step back.
-Trusted
Hi there Jamie,Are you using the SDK with PowerShell or Python, or are you trying a straight GET request?
You can pass the authentication via the url: https://username:password@example.com/ Though I would recommend either using Swis-Connect (Powershell) or SwisClient (Python).
Regards,
Rich (yaquaholic)
I am working with SwisClient in python.
Here's a simple python example, the username (at least in our environment) needs the domain, such as domain\username and the user needs to be a SolarWinds admin user.
from orionsdk import SwisClient
npm_server = 'solar01.domain.net'username = 'domain\user'password = 'password
swis = SwisClient(npm_server, username, password)
results = swis.query("SELECT TOP 3 NodeID, DisplayName FROM Orion.Nodes")
print(results)
Would it matter if the AD accounts are added locally or can they just be in an AD group that has been added?
Local and AD Groups work fine, you can test the user by logging in to the GUI.
If the user logs in with Orion admin rights you'll be good to go.
As far as user permissions go, the account should be good. The group has admin rights and the user can login. It is only when sent to the API that it does not work. Again, a local account with no special access can query just fine.
I would have to agree with Kevin, though I love Python, Powershell is the easier language to interact with the Orion API.