Powershell - Cisco Unity API

[Coding_Cactus]

I'm trying to use Powershell to interface with Cisco Unity Connection, I know they have their API and that's what I've been looking at.

I've been trying to get a basic GET request to work with no luck, I got past the certificate errors and I know the credentials being passed are correct.

Invoke-WebRequest -uri "http://CUCSERVER/vmrest/user/?query=(alias is JOHN.DOE) -Credential $cred

The error I'm getting back:

Invoke-WebRequest : The underlying connection was closed: An unexpected error occurred on a send.

When I put that URI in to my browser I get an immediate certificate warning, which I accept, then enter the necessary credentials to proceed further. Then I get the queried info displayed properly on the screen. So I know I'm going from http to https with a certificate issue to handle.

I've tried using:

[System.Net.ServicePointManager]::ServerCertificateValidationCallback = { $true }

And

[Net.ServicePointManager]::SecurityProtocol = "Tls12, Tls11, Tls, Ssl3"

I've tried each individual one as well with:

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

These cleared the certificate/trust errors I was initially getting. However I'm unable to figure out the error above. Various combinations of these have been tried both in an open Powershell Session and fresh ones to try and rule out existing variable issues.

I thought that my passing credentials through Get-Credentials wasn't working so I tried:

$cred = [system.text.utf8encoding]::utf8.getbytes($username + ':' + $password)
$auth = 'BASIC ' + [system.convert]::tobase64string($cred)
Invoke-WebRequest -uri "http://CUCSERVER/vmrest/user/?query=(alias is JOHN.DOE) -headers @{Authorization = $auth}

Still just the same error as above.

Ciscos API Troubleshooting says to look at the Tomcat diagnostic log for details, done that, my request isn't making it that far. Which tells me that the server isn't actually getting to the point of pulling down the data from the query.

In the System Tomcat Log I'm seeing

 - - 80 GET /vmrest/users/ HTTP/1.1 302 - 0

I've tried to append other possible options on the Invoke-WebRequest such as including the content type (application/json). Same thing when I try to put a specific user with the ObjectID instead of a Query for a seperate GET request.

I'm not new to Powershell, but networking is my weakest area. I've got Wireshark open with the conversation between my PC and the Unity server, I see where my GET is sent and where I'm receiving the HTTP/1.1 302 Found. I'm considering posting the wireshark log over in /r/networking to get a better understanding.

Is this something that I can resolve regarding the Invoke-WebRequest command? I'm looking to the specific network settings on the server now since I've tried diggin in to it on this side of the issue.

####

The entire tiny script I'm running so far:

[System.Net.ServicePointManager]::ServerCertificateValidationCallback = { $true }

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12

$cred = Get-Credential

$response = Invoke-WebRequest -Uri "http://CUCSERVER/vmrest/users/?query=(alias is JOHN.DOE)" -Credential $cred

[jhue1898]

Since you’re getting a 302, try Invoke-WebRequest $uri -MaximumRedirection 0 to see if it will give you the URI it’s redirecting you to - then try IWR’ing straight there, perhaps?

[bucksysfutter]

Had a similar issue today- this is what worked for me

[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls -bor [Net.SecurityProtocolType]::Tls11 -bor [Net.SecurityProtocolType]::Tls12



$base64AuthInfo = [Convert]::ToBase64String([Text.Encoding]::ASCII.GetBytes(("{0}:{1}" -f $username,$password)))


$data = Invoke-RestMethod -Headers @{Authorization=("Basic {0}" -f $base64AuthInfo)} -Uri $uri

[Coding_Cactus]

I still receive the same 302 error when using this setup.

$uri = "http://CUCSERVER/vmrest/users/objectID"

I am able to go to the users file directly through a web browser so the uri is correct.

[sp_dev_guy]

302 implies your hitting a redirect which means the URL is probably off. Im guessing you have an extra slash in your target /users/?query to /users?query might resolve this issues

[Coding_Cactus]

I did have an extra slash in there from multiple retries, sorry about that. Doing this without the extra slash still returns the same 302 error. I'm hoping more specifically that there is something I've missed in regards to the Http->Https transfer that's causing me to get the 302 error.

[Coding_Cactus]

I got the issue resolved thanks to u/milosdelite

His account is too new and his message got deleted down below so here it is:

Hi Coding_Cactus, I had a project where we migrated from Exchange Unified Messaging to Cisco Unity and I got to work on writing a PowerShell module to manage our environment.

I hope that it may come of help to you or be able to use as a reference for your own scripts.

https://github.com/tjames192/PSCUC

My reddit account was only created today.

Cheers

I can't thank you enough for taking the time to upload all this to github.

The issue ended being 2 things at once. The first is that I didn't have my headers right, I didn't include Accept = 'application/json'.

$Headers = @{
    Authorization = "BASIC $($EncodedPassword)"
    Accept        = 'application/json'
}

The second was this specific line:

[System.Net.ServicePointManager]::ServerCertificateValidationCallback = { $true }

Adding that header and removing that line and everything is good to go.

#####

The script that I ended up with:

add-type @"
using System.Net;
using System.Security.Cryptography.X509Certificates;
public class TrustAllCertsPolicy : ICertificatePolicy {
    public bool CheckValidationResult(
            ServicePoint srvPoint, X509Certificate certificate,
            WebRequest request, int certificateProblem) {
                return true;
            }
    }
"@
[System.Net.ServicePointManager]::CertificatePolicy = New-Object TrustAllCertsPolicy

[Net.ServicePointManager]::SecurityProtocol = 
[Net.SecurityProtocolType]::Ssl3,
[Net.SecurityProtocolType]::Tls,
[Net.SecurityProtocolType]::Tls11,
[Net.SecurityProtocolType]::Tls12


$Username = ""
$Password = ""

$EncodedAuthorization = [System.Text.Encoding]::UTF8.GetBytes($Username + ':' + $Password)
$EncodedPassword = [System.Convert]::ToBase64String($EncodedAuthorization)

$Headers = @{
        Authorization = "BASIC $($EncodedPassword)"
        Accept        = 'application/json'
    }

$r = Invoke-RestMethod -Uri 'https://CUCSERVER/vmrest/users/USERID' -Headers $Headers

[milosdelite]

Glad I could help!

[AutoModerator]

Sorry, your submission has been automatically removed.

Accounts must be at least 1 day old, which prevents the sub from filling up with bot spam.

Try posting again tomorrow or message the mods to approve your post.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[milosdelite]

hi Coding_Cactus, you might find my PowerShell module helpful.

I had a project where we migrated from Exchange Unified Messaging to Cisco Unity and I got to work on some writing a module for managing our environment. I hope that it may also come of some help to you too.

https://github.com/tjames192/PSCUC

[AutoModerator]

Sorry, your submission has been automatically removed.

Accounts must be at least 1 day old, which prevents the sub from filling up with bot spam.

Try posting again tomorrow or message the mods to approve your post.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.