Log in to create and rate content, and to follow, bookmark, and share content with other members. Not a member? Join Now!

AnsweredAssumed Answered

API call via VBS , permission issue

Question asked by Jerbo on Jun 12, 2013
Latest reply on Jun 14, 2013 by Jerbo

Like • Show 0 Likes0
Comment • 8

When I try to use the api via a vbs script (https://discussions.qualys.com/docs/DOC-3492) i get logged in, but afterwords, i get this report back

<?xml version="1.0" encoding="UTF-8" ?>

<!DOCTYPE SIMPLE_RETURN SYSTEM "https://qualysapi.qualys.eu/api/2.0/simple_return.dtd">

<SIMPLE_RETURN>

<TEXT>Your permissions or account settings do not allow you to access this API</TEXT>

</RESPONSE>

</SIMPLE_RETURN>

Though i have the manager role, with api selected, i still get this error.

I used the vbs script from the examples (https://discussions.qualys.com/docs/DOC-3492)

with https://qualysapi.qualys.eu as url .

I think i missed something, but big question : What ?

with regards

Jeroen

No one else has this question

Outcomes

8 Replies

Eric Brinkley Jun 12, 2013 6:47 AM
Mark Correct
Correct Answer
Usually 'account' in this context is not the user account by your customer account with Qualys.

What API are you calling?
Like • Show 0 Likes0
Actions
- Jerbo @ Eric Brinkley on Jun 12, 2013 6:58 AM
  Mark Correct
  Correct Answer
  Eric,
  
  as far as i can see i'm calling the report api ?
  what i can find in the script is : api/2.0/fo/report/?action=launch&template_id=
  
  is that what you mean ?
  Like • Show 0 Likes0
  Actions
  - Eric Brinkley @ Jerbo on Jun 12, 2013 7:03 AM
    Mark Correct
    Correct Answer
    That's the one. Is that the whole thing? If so, it looks like you are missing the template_id.
    Like • Show 0 Likes0
    Actions
    - Jerbo @ Eric Brinkley on Jun 12, 2013 7:10 AM
      Mark Correct
      Correct Answer
      The query lauched to qualys is
      "https://qualysapi.qualys.eu/api/2.0/fo/report/?action=launch&template_id=90369168&output_format=xml"
      
      first i login at that url, and that goes wel.
      <?xml version="1.0" encoding="UTF-8" ?>
      <!DOCTYPE SIMPLE_RETURN SYSTEM "https://qualysapi.qualys.eu/api/2.0/simple_return.dtd">
      <SIMPLE_RETURN>
      <RESPONSE>
          <DATETIME>2013-06-12T14:07:43Z</DATETIME>
          <TEXT>Logged in</TEXT>
      </RESPONSE>
      </SIMPLE_RETURN>
      
      when i try to read the report than i immidiately get the respons
      <?xml version="1.0" encoding="UTF-8" ?>
      <!DOCTYPE SIMPLE_RETURN SYSTEM "https://qualysapi.qualys.eu/api/2.0/simple_return.dtd">
      <SIMPLE_RETURN>
      <RESPONSE>
          <DATETIME>2013-06-12T14:08:31Z</DATETIME>
          <CODE>2010</CODE>
          <TEXT>Your permissions or account settings do not allow you to access this API</TEXT>
      </RESPONSE>
      </SIMPLE_RETURN>
      Like • Show 0 Likes0
      Actions
      - Eric Perraudeau @ Jerbo on Jun 12, 2013 3:44 PM
        Mark Correct
        Correct Answer
        Hi Eric,
        
        In order to use this API, your qualysguard subscription requires that a feature called "report center" is enabled.
        The report center should be enabled by default if you have an Enterprise type of subscription. If you have an Express subscription, you need to work with your TAM to get this feature enabled for you.
        
        I hope it helps,
        Eric
        Like • Show 0 Likes0
        Actions
        Jerbo @ Eric Perraudeau on Jun 12, 2013 11:14 PM
        Mark Correct
        Correct Answer
        Eric,
        
        Thanks for the anwser.
        I'm going to see if i can get the results via anther api call.
        
        with regards,
        
        jeroen
        Like • Show 0 Likes0
        Actions
        Eric Perraudeau @ Jerbo on Jun 13, 2013 6:44 PM
        Mark Correct
        Correct Answer
        The detection API should be a good alternative: QualysGuard "detection" API examples and use cases
        Like • Show 0 Likes0
        Actions
        Jerbo @ Eric Perraudeau on Jun 14, 2013 1:34 AM
        Mark Correct
        Correct Answer
        Thanks for the hint to use the "detection api"
        I looked at it
        The info comming from there is different from the xml output of the report (via the gui), so i have to rewrite my xml interpreter.
        
        Other thing with the detection api : I have to retrieve every scan separately, as with the gui report, i report over all scan's made until that moment.
        (so i first have to detect all scans with the correct resultid, and than retrive every single scan (i may case 50), and process each result separately
        
        same goes for the xml output of a map .
        by the way : the report via the gui, and the map result via the api are different :
        in the last one the info of live, approved etc is not shown
        
        For the time beeing i will still use the 'gui - report - download as xml' way (will take about 10 minutes for 1 reports + several mapresults)
        
        Jeroen
        Like • Show 0 Likes0
        Actions

API call via VBS , permission issue

Outcomes

Related Content

Recommended Content