Forum Discussion

KeyClacker's avatar
KeyClacker
Icon for Altocumulus rankAltocumulus
Feb 28, 2022

Powershell: Invoke-RESTmethod on /mgmt/tm/sys/ucs (403) Forbidden error

I'm fairly experienced with Powershell and have used the Invoke-RestMethod cmdlet, and vendor documentation, to automate some things before.  I've just inherited management of an HA pair of F5 BIG-IP...
api
devops
powershell
SamCo's avatar
SamCo
Icon for Cirrus rankCirrus

Did you try to make the same POST request with a different UCS name ?

Maybe there is already an existing one on your box with the same name, in that case you request could be blocked to avoid to override it.

KeyClacker's avatar
KeyClacker
Icon for Altocumulus rankAltocumulus
Mar 01, 2022

I have not tried another account as this is my account, but I could potentially create an account just for this. However, my account is an admin, and it does let me authenticate via the API to do a GET request and get a list of the UCS archives already on the appliance, for which there is one. And there is no name collision.  This is from F5's documentation:

<POST> /mgmt/tm/sys/ucs -d '{"command":"save","name":"/var/local/ucs/test_ucs.ucs"}'

However, in another document somewhere else they only provide the filename with no full path, and no file extension.  I've tried all of those combos with the same result. 

  • SamCo's avatar
    SamCo
    Icon for Cirrus rankCirrus
    Mar 01, 2022

    Maybe I have not been clear enough : the credential are fine, I mean the filename :

    You have a 403 for "/var/local/ucs/test_ucs.ucs", have you tried "/var/local/ucs/test_ucs_XXX.ucs" ?

     

    Cheers,

    Sam

    • KeyClacker's avatar
      KeyClacker
      Icon for Altocumulus rankAltocumulus
      Mar 01, 2022

      Thanks Sam. I have tried that. I've tried:

      /var/local/ucs/test_ucs.ucs

      /var/local/ucs/test_ucs123.ucs

      /var/local/ucs/test_ucs123

      test_ucs

      test_ucs123

       

      all produce the same error message.  I'm currently attempting to combine some methodology from the POSH-LTM-Rest module found here and the code i've been working on already. The documentation doesn't call it out anywhere but I wonder if you have to retrieve an F5 session token before you can do anything using the POST method.