9 Replies Latest reply on Jul 24, 2019 10:46 AM by rve

REST API returning 403 Forbidden for Admin user

toneill2000 Aug 17, 2015 12:22 PM

I am currently using the SolarWinds rest API to extract Node information and all sorts of other data from the database. My scripts have been working fine until recently when I'm now receiving a 403 Forbidden message response from the server. The credentials I'm using are my admin credentials which I use for both the REST API as well as logging into the SW web UI. I've verified that my user credentials are fully equipped with admin rights across the board.

Does anyone know why I would all of a sudden have 403 forbidden responses for my REST API interfaces. I can login to the web UI with no problems at all. I'm assuming it's a security thing for REST API but I don't know what would have changed. Thanks in advance.

Todd

Request:

GET https://localhost:17778/SolarWinds/InformationService/v3/Json/Query?query=select%2Bnodeid%2Bfrom%2Borion.NodesCustomProperties HTTP/1.1

Accept-Encoding: gzip,deflate

Host: localhost:17778

Connection: Keep-Alive

User-Agent: Apache-HttpClient/4.1.1 (java 1.5)

Authorization: Basic RnJhbmsuSGFuc2VuQGJsYWNrdksYmF1ZDpCbEBja2JhdWQx

Response:

HTTP/1.1 403 Forbidden

Content-Length: 0

Server: Microsoft-HTTPAPI/2.0

Date: Mon, 17 Aug 2015 16:58:01 GMT

Re: REST API returning 403 Forbidden for Admin user

tdanner Aug 17, 2015 1:47 PM (in response to toneill2000)

Did you intentionally scramble that Authorization header before posting this message? Because it is not valid base64 as it is.
Like (0)

Actions
- Re: REST API returning 403 Forbidden for Admin user
  
  toneill2000 Aug 17, 2015 7:20 PM (in response to tdanner)
  
  Hi Tdanner,
  Yes, that is correct, I scrambled that portion of the request as that is auto generated at run time. I was trying to avoid any reverse engineering sort of things on it. Anyways, all the other content is verbatim that it is sent and received. Thanks in advance for any suggestions.
  Todd
  
  Like (0)
  
  Actions
  - Re: REST API returning 403 Forbidden for Admin user
    
    toneill2000 Aug 19, 2015 6:25 PM (in response to toneill2000)
    
    I'm hoping there are others out there that have run across this issue and were able to resolve it. I cannot even login to SWQL Studio either. The error dialog that I get when trying to log into SWQL Studio is "Unable to connect to Information Service. An error occurred when verifying security for this message." It appears I have a security related problem but, as I mentioned, I can use these exact same login credentials to login to the web UI, navigate to all users and see that I have full Admin access rights. Thanks in advance for any assistance on this one.
    
    Like (0)
    
    Actions
    - Re: REST API returning 403 Forbidden for Admin user
      
      tdanner Aug 19, 2015 10:37 PM (in response to toneill2000)
      
      Are you using a Windows/AD account or an Orion database account?
      
      You could also look in the information service log for more error details: C:\ProgramData\SolarWinds\InformationService\v3.0\Orion.InformationService.log
      
      Like (0)
      
      Actions
      - Re: REST API returning 403 Forbidden for Admin user
        
        toneill2000 Aug 20, 2015 9:04 PM (in response to tdanner)
        
        tdanner, thanks for response and here are answers to these.
        1) Yes, we are using the Windows Account for access to the OS, SW Web UI, and the REST API. It is administrator with full rights on OS and SW user administration.
        2) I'm pasting the log below. I ran several REST API requests and then refreshed my view on this file. I don't see anything related to my service request but it appears that an error is being put in the log every minute regarding licensing. Do you think this could be the issue? I'm also pasting the user admin screen showing full rights using the Windows account. Also, I'm posting the Soap UI request I was using for testing.
        
        2015-08-20 21:44:52,547 [11] ERROR SolarWinds.Orion.Core.Common.LicenseBasedProductInfoProvider - Unable to load license for DPI v1.0 (QoE:1). System.ArgumentNullException: Value cannot be null.
        Parameter name: licenses
           at SolarWinds.Orion.Core.Common.LicensedProductInfo.UpdateLicenses(IProductLicense[] licenses)
           at SolarWinds.Orion.Core.Common.LicenseBasedProductInfoProvider.CreateProduct(ILicensedProduct product)
        2015-08-20 21:45:53,010 [55] ERROR SolarWinds.Orion.Core.Common.LicenseBasedProductInfoProvider - Unable to load license for DPI v1.0 (QoE:1). System.ArgumentNullException: Value cannot be null.
        Parameter name: licenses
           at SolarWinds.Orion.Core.Common.LicensedProductInfo.UpdateLicenses(IProductLicense[] licenses)
           at SolarWinds.Orion.Core.Common.LicenseBasedProductInfoProvider.CreateProduct(ILicensedProduct product)
        2015-08-20 21:46:53,472 [3] ERROR SolarWinds.Orion.Core.Common.LicenseBasedProductInfoProvider - Unable to load license for DPI v1.0 (QoE:1). System.ArgumentNullException: Value cannot be null.
        Parameter name: licenses
           at SolarWinds.Orion.Core.Common.LicensedProductInfo.UpdateLicenses(IProductLicense[] licenses)
           at SolarWinds.Orion.Core.Common.LicenseBasedProductInfoProvider.CreateProduct(ILicensedProduct product)
        2015-08-20 21:47:53,948 [41] ERROR SolarWinds.Orion.Core.Common.LicenseBasedProductInfoProvider - Unable to load license for DPI v1.0 (QoE:1). System.ArgumentNullException: Value cannot be null.
        Parameter name: licenses
           at SolarWinds.Orion.Core.Common.LicensedProductInfo.UpdateLicenses(IProductLicense[] licenses)
           at SolarWinds.Orion.Core.Common.LicenseBasedProductInfoProvider.CreateProduct(ILicensedProduct product)
        
        Like (0)
        
        Actions
        
        Re: REST API returning 403 Forbidden for Admin user
        
        tdanner Aug 21, 2015 11:14 AM (in response to toneill2000)
        
        The license errors are harmless and unrelated.
        
        Have you tried restarting SWISv3?
        
        Like (0)
        
        Actions
        
        Re: REST API returning 403 Forbidden for Admin user
        
        toneill2000 Aug 21, 2015 12:01 PM (in response to tdanner)
        
        I have now been given another user credential to access the database using REST API and SWQL Studio. This new credential now works so I'm giving up on using my credentials. No answer given to me on why mine doesn't work. Thanks for all your input tdanner. We can consider this closed.
        
        Like (0)
        
        Actions
Re: REST API returning 403 Forbidden for Admin user

nick405060 Jun 8, 2018 12:51 PM (in response to toneill2000)

Same issue, fixed it by creating myself an Orion account for SW (had Windows account before). Am now able to finally get the SolarWinds add-on for Splunk working
1 of 1 people found this helpful
Like (0)

Actions
Re: REST API returning 403 Forbidden for Admin user

rve Jul 24, 2019 10:46 AM (in response to toneill2000)

Same issue, it appeared that someone had changed the Windows AD password without modifying the configuration file used for the REST call.
It worked again after using the correct password.

IMO a status 401 instead of 403 would have been more appropriate...
1 of 1 people found this helpful
Like (0)

Actions