IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  rest api for getting stanzas return non stanzas too.

    Posted 05/04/19 10:54 AM
    if you call the rest api to get all stanzas.

    curl -k "https://{appliance_hostname}/wga/reverseproxy/{reverseproxy_id}/configuration/stanza" -H 'Accept: application/json' -H 'Content-Type: application/json' -u 'uid:pwd'

    You get stanzas + non stanzas like for example "authentication-mechanisms"

    If you look in the configuration file the entry looks like this. no [ ] around the entry.
    authentication-mechanisms::* = exclude

    Is this a bug or why does it think it's a stanza?



    ------------------------------
    Regards Mikael
    ------------------------------


  • 2.  RE: rest api for getting stanzas return non stanzas too.

    Posted 05/04/19 11:59 AM
    Edited by Jon Harry 05/04/19 12:00 PM
    Hello,

    There are some stanzas in the Reverse Proxy config file which should not be manually edited and so are not shown in the web console.  One of these is the [authentication-mechanisms] stanza.

    Looks like these are returned by the REST API.

    Jon.

    ------------------------------
    Jon Harry
    Consulting IT Security Specialist
    IBM
    ------------------------------



  • 3.  RE: rest api for getting stanzas return non stanzas too.

    Posted 05/06/19 09:48 AM
    Hi Mikael,

    As John noted there are several stanzas which are masked by the LMI.  The [authentication-mechanisms] is one of them.
    The entry you are referring to is for this stanza:

    [cfg-db-cmd:entries]
    authentication-mechanisms::* = exclude

    which is related to RP instance clustering.

    We need to update the REST API so it does not return stanzas which cannot be changed.

    ------------------------------
    Nick
    ISAM Level II Support
    ------------------------------



Related Content