For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

BPRIDE's avatar
BPRIDE
Icon for Nimbostratus rankNimbostratus
May 18, 2020

F5 AS3

Hi, I tried GET request and received a response 404

 

https://mgmtip//mgmt/shared/appsvcs/declare?show=full

{

    "code": 404,

    "message": "unable to retrieve declaration"

}

POST https://mgmtip/mgmt/shared/appsvcs/declare received error code 500

 

 {

   "class": "AS3",

   "action": "deploy",

   "persist": true,

   "declaration": {

     "class": "ADC",

     "schemaVersion": "3.19.0",

     "id": "urn:uuid:33045210-3ab8-4636-9b2a-c98d22ab915d",

     "label": "Sample 1",

     "remark": "Simple HTTP Service with Round-Robin Load Balancing",

     "Sample_01": {

       "class": "Tenant",

       "A1": {

         "class": "Application",

         "template": "http",

         "serviceMain": {

           "class": "Service_HTTP",

           "virtualAddresses": [

             "10.0.1.10"

           ],

           "pool": "web_pool"

         },

         "web_pool": {

           "class": "Pool",

           "monitors": [

             "http"

           ],

           "members": [

             {

               "servicePort": 80,

               "serverAddresses": [

                 "192.0.1.10",

                 "192.0.1.11"

               ]

             }

           ]

         }

       }

     }

   }

 }

 

{

    "code": 500,

    "message": "GET http://admin:XXXXXX@localhost:8100/mgmt/tm/sys/provision query target BIG-IP provisioning response=401 body={\"code\":401,\"message\":\"Authorization failed: user=https://localhost/mgmt/shared/authz/users/rajah resource=/mgmt/tm/sys/provision verb=GET uri:http://localhost:8100/mgmt/tm/sys/provision referrer:/127.0.0.1:60320 sender:/127.0.0.1:60320\",\"referer\":\"/127.0.0.1:60320\",\"restOperationId\":1846768,\"errorStack\":[\"java.lang.SecurityException: Authorization failed: user=https://localhost/mgmt/shared/authz/users/rajah resource=/mgmt/tm/sys/provision verb=GET uri:http://localhost:8100/mgmt/tm/sys/provision referrer:/127.0.0.1:60320 sender:/127.0.0.1:60320\",\"at com.f5.rest.workers.EvaluatePermissions.failPermissionValidation(EvaluatePermissions.java:236)\",\"at com.f5.rest.workers.EvaluatePermissions.completeEvaluatePermission(EvaluatePermissions.java:198)\",\"at com.f5.rest.workers.EvaluatePermissions.evaluatePermission(EvaluatePermissions.java:78)\",\"at com.f5.rest.workers.ForwarderPassThroughWorker.onForward(ForwarderPassThroughWorker.java:227)\",\"at com.f5.rest.workers.ForwarderPassThroughWorker.onGet(ForwarderPassThroughWorker.java:492)\",\"at com.f5.rest.common.RestWorker.callDerivedRestMethod(RestWorker.java:1113)\",\"at com.f5.rest.common.RestWorker.callRestMethodHandler(RestWorker.java:1034)\",\"at com.f5.rest.common.RestServer.processQueuedRequests(RestServer.java:1355)\",\"at com.f5.rest.common.RestServer.access$000(RestServer.java:45)\",\"at com.f5.rest.common.RestServer$1.run(RestServer.java:316)\",\"at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:473)\",\"at java.util.concurrent.FutureTask.run(FutureTask.java:262)\",\"at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:178)\",\"at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:292)\",\"at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1152)\",\"at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:622)\",\"at java.lang.Thread.run(Thread.java:748)\\n\"],\"kind\":\":resterrorresponse\"}"

}

 

 

 

2 Replies

  • Re: 500 response to POST.

    The error message says "Authorization failed". The user "rajah" may not have sufficient privilege. Try the "admin" user.