Administrator Guide

1119 | External User Management Dell Networking W-Series ArubaOS 6.4.x| User Guide
Options Description Range / Defaults
authentication
Authentication method used to authenticate the
message and the sender. You can use any of
MD5, SHA-1 or clear text methods of
authentication. This option is ignored if shared
secret is not configured. It is, however, mandatory
if it is configured.
—
key
This is the encoded SHA1/MD5 hash of shared
secret or plaintext shared secret.
This option is ignored if shared secret is not
configured on the switch.
The actual MD5/SHA-1 hash is 16/20 bytes and
consists of binary data. It must be encoded as an
ASCII based HEX string before sending. It must be
present when the controller is configured with an
xml-api key for the server. Encoded hash length is
32/40 bytes for MD5/SHA-1.
version
The version of the XML API interface available in
the controller. This field is mandatory is all
requests.
Current version 1.0
Monitoring External Captive Portal Usage Statistics
To check the external captive portal authentication statistics use the show aaa xml-api statistics
command. This command displays the number of times an authentication command was executed per client.
The command also displays the number of times an authentication event occurred and the number of new
authentication events that occurred since the last status check.
(host) # show aaa xml-api statistics
Sample Code
This section lists a sample code that will help you get started in using the ArubaOS XML API interface. These
codes have been tested in a controlled environment. We recommend that you test this code in a non-
production environment before using it for actual user management tasks.
Using XML API in C Language
The example script is written in the C language. The example script (auth.c) sends an authentication request
from your authentication server to the controller.
This is an example code and is provided for illustration purposes. If you plan to use this code in your environment,
ensure that the code meets your IT guidelines. Also create an error free executable to successfully execute the
script.
##### auth.c listing
##### Authentication Script Example -- Start --
#include <stdio.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <getopt.h>
char *command, *ipaddr, *macaddr;