For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

KeyClacker's avatar
KeyClacker
Icon for Altocumulus rankAltocumulus
Feb 28, 2022

Powershell: Invoke-RESTmethod on /mgmt/tm/sys/ucs (403) Forbidden error

I'm fairly experienced with Powershell and have used the Invoke-RestMethod cmdlet, and vendor documentation, to automate some things before.  I've just inherited management of an HA pair of F5 BIG-IP...
api
devops
powershell
SamCo's avatar
SamCo
Icon for Cirrus rankCirrus
Mar 01, 2022

Did you try to make the same POST request with a different UCS name ?

Maybe there is already an existing one on your box with the same name, in that case you request could be blocked to avoid to override it.

  • xuwen's avatar
    xuwen
    Icon for Cumulonimbus rankCumulonimbus
    Mar 01, 2022

    use datetime to rename format ucs filename and make it not be the same

    from datetime import datetime

    '/var/local/ucs/test_{}.ucs'.format(datetime.now().strftime('%Y-%m-%d'))

     

  • KeyClacker's avatar
    KeyClacker
    Icon for Altocumulus rankAltocumulus
    Mar 01, 2022

    I have not tried another account as this is my account, but I could potentially create an account just for this. However, my account is an admin, and it does let me authenticate via the API to do a GET request and get a list of the UCS archives already on the appliance, for which there is one. And there is no name collision.  This is from F5's documentation:

    <POST> /mgmt/tm/sys/ucs -d '{"command":"save","name":"/var/local/ucs/test_ucs.ucs"}'

    However, in another document somewhere else they only provide the filename with no full path, and no file extension.  I've tried all of those combos with the same result. 

    • SamCo's avatar
      SamCo
      Icon for Cirrus rankCirrus
      Mar 01, 2022

      Maybe I have not been clear enough : the credential are fine, I mean the filename :

      You have a 403 for "/var/local/ucs/test_ucs.ucs", have you tried "/var/local/ucs/test_ucs_XXX.ucs" ?

       

      Cheers,

      Sam

      • KeyClacker's avatar
        KeyClacker
        Icon for Altocumulus rankAltocumulus
        Mar 01, 2022

        Thanks Sam. I have tried that. I've tried:

        /var/local/ucs/test_ucs.ucs

        /var/local/ucs/test_ucs123.ucs

        /var/local/ucs/test_ucs123

        test_ucs

        test_ucs123

         

        all produce the same error message.  I'm currently attempting to combine some methodology from the POSH-LTM-Rest module found here and the code i've been working on already. The documentation doesn't call it out anywhere but I wonder if you have to retrieve an F5 session token before you can do anything using the POST method.