[Freeipa-devel] Web services in freeIPA

[Adam Young]

On 02/07/2014 04:33 AM, Alexandre Santos wrote:
> Hi Martin,
>
> I´ve tried your example and i get this error:
>
> curl -v  \
>          -H "Content-Type:application/json" \
>          -H "Accept:applicaton/json"\
>          --negotiate -u : \
>          --delegation always \
>          --cacert /etc/ipa/ca.crt  \
>          -d  '{"method":"user_find","params":[[""],{}],"id":0}' \
>          -X POST https://ipa/ipa/json
>
> ...
>
> > User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 
> NSS/3.13.6.0 zlib/1.2.3 libidn/1.18 libssh2/1.4.2
> > Host: pi
> > Content-Type:application/json
> > Accept:applicaton/json
> > Content-Length: 48
> >
> < HTTP/1.1 200 Success
> < Date: Thu, 06 Feb 2014 16:42:26 GMT
> < Server: Apache/2.2.15 (CentOS)
> < Connection: close
> < Transfer-Encoding: chunked
> < Content-Type: application/json; charset=utf-8
> <
> {
>     "error": {
>         "code": 911,
>         "message": "Missing or invalid HTTP Referer, missing",
>         "name": {
>             "__base64__": "UmVmZXJlckVycm9y"
>         }
>     },
>     "id": null,
>     "principal": "admin at ipa",
>     "result": null,
>     "version": "3.0.0"
> * Closing connection #0
>
>
> Any suggestion?
That is the CSRF check.

Explicitly set the referrer header to the same URL as the web server and 
you should be OK

>
> Alexandre Santos
>
> On 06 Feb 2014, at 15:12, Martin Kosek <mkosek at redhat.com 
> <mailto:mkosek at redhat.com>> wrote:
>
>> As Petr said, we do not have a proper documentation for using RPC for
>> controlling IPA. But I think you can start with looking at [1] to see the
>> template and try running our commands with "-vv" which will show you 
>> how we
>> call the API:
>>
>> $ ipa -vv user-show admin
>>
>> Martin
>>
>> [1] 
>> http://adam.younglogic.com/2010/07/talking-to-freeipa-json-web-api-via-curl/
>>
>> On 02/06/2014 04:04 PM, Alexandre Santos wrote:
>>>
>>> Is there any examples that can guide me.
>>>
>>> Thanks
>>> Alexandre Santos
>>>
>>> On 06 Feb 2014, at 14:33, Petr Vobornik <pvoborni at redhat.com 
>>> <mailto:pvoborni at redhat.com>> wrote:
>>>
>>>> On 6.2.2014 15:22, Alexandre Santos wrote:
>>>>> Hi,
>>>>>
>>>>> I´m starting in freeIPA and I would like to know what web apps are 
>>>>> available for use, like create user, delete user and so on. I´ve 
>>>>> seen that when i use the command "ipa -vv user-add" a url for the 
>>>>> app if given.
>>>>>
>>>>> I would like to know if there is any information about that.
>>>>>
>>>>> Thanks
>>>>>
>>>>> Alexandre Santos
>>>>>
>>>>
>>>> The url you saw is most-likely for XML RPC API.
>>>>
>>>> You can check:
>>>>
>>>> https://hostname/ipa/xml - XML RPC API
>>>> https://hostname/ipa/json - JSON RPC API
>>>> https://hostname/ipa/session/xml XML RPC API with session support
>>>> https://hostname/ipa/session/json JSON RPC API with session support
>>>> https://hostname/ipa/ui - Web UI
>>>> https://hostname/ipa/config/unauthorized.html - some config and 
>>>> error pages
>>>>
>>>> We don't have docs for the APIs yet.
>>>> -- 
>>>> Petr Vobornik
>>>
>>
>
>
>
> _______________________________________________
> Freeipa-devel mailing list
> Freeipa-devel at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-devel

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20140210/cc45f3a5/attachment.htm>