Resolved: NetBox returned: Forbidden: Invalid token

[jancovic]

Hi
I am trying to run netbox-sync.py to get data from Vcenter...
but I got this error : looks that there is issue with connection to Netbox API running in localhost, even API is running.
Using Almost Latest Netbox 3.3.6

python3 netbox-sync.py
2022-11-27 11:26:15,968 - INFO: Starting NetBox Sync v1.3.0 (2022-09-06)
2022-11-27 11:26:15,968 - DEBUG: Using config file: /opt/vcenter/netbox-sync/settings.ini
2022-11-27 11:26:15,968 - DEBUG: Config: netbox.api_token = "e2***
2022-11-27 11:26:15,968 - DEBUG: Config: netbox.host_fqdn = "127.0.0.1"
2022-11-27 11:26:15,968 - DEBUG: Config: n DEBUG: Config: netbox.client_cert_key = None
2022-11-27 11:26:15,969 - DEBUG: Config: netbox.prune_enabled = False
2022-11-27 11:26:15,969 - DEBUG: Config: netbox.prune_delay_in_days = 30
2022-11-27 11:26:15,969 - DEBUG: Config: netbox.default_netbox_result_limit = 200
2022-11-27 11:26:15,969 - DEBUG: Config: netbox.timeout = 30
2022-11-27 11:26:15,970 - DEBUG: Config: netbox.max_retry_attempts = 4
2022-11-27 11:26:15,970 - DEBUG: Config: netbox.use_caching = True
2022-11-27 11:26:15,970 - DEBUG: Config: netbox.ignore_unknown_source_object_pruning = False
2022-11-27 11:26:15,970 - WARNING: Log level is set to DEBUG3, Request logs will only be printed to console
2022-11-27 11:26:15,970 - DEBUG: Created new requests Session for NetBox.
2022-11-27 11:26:15,973 - DEBUG: Starting new HTTP connection (1): %22127.0.0.1%22:443
ERROR: NetBox connection: HTTPConnectionPool(host='%22127.0.0.1%22', port=443): Max retries exceeded with url: /api/ (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7fba8c6e9370>: Failed to establish a new connection: [Errno -2] Name or service not known'))
(.venv) [root@netbox-sync]#

setting.ini

host_fqdn = "127.0.0.1"
port = 443
disable_tls = True
validate_tls_certs = False
[source/my-vcenter-example]
enabled = true
type = vmware
host_fqdn = "some IP"
port = 443

I checked basic http reuqest and is working, just complaining certificate, so no issue with proxy or something...

import urllib.request
urllib.request.urlopen('https://127.0.0.1',timeout=1)

output

File "/opt/rh/rh-python38/root/usr/lib64/python3.8/urllib/request.py", line 1357, in do_open
    raise URLError(err)
urllib.error.URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate (_ssl.c:1131)>

OK, I updated the host, got some progress... but got another error.
ERROR: Unable to determine NetBox version, HTTP header 'API-Version' missing.
But when I do manual API request with curl...is working fine.

2022-11-27 12:21:00,764 - DEBUG: Created new requests Session for NetBox.
2022-11-27 12:21:00,767 - DEBUG: Starting new HTTP connection (1): 127.0.0.1:443
send: b'GET /api/ HTTP/1.1\r\nHost: 127.0.0.1:443\r\nUser-Agent: netbox-sync/1.3.0\r\nAccept-Encoding: gzip, deflate\r\nAccept: */*\r\nConnection: keep-alive\r\nAuthorization: Token "e2416"\r\nContent-Type: application/json\r\n\r\n'
reply: 'HTTP/1.1 400 Bad Request\r\n'
header: Server: nginx/1.23.2
header: Date: Sun, 27 Nov 2022 18:21:00 GMT
header: Content-Type: text/html
header: Content-Length: 255
header: Connection: close
2022-11-27 12:21:00,769 - DEBUG: http://127.0.0.1:443 "GET /api/ HTTP/1.1" 400 255
2022-11-27 12:21:00,770 - INFO: Successfully connected to NetBox '127.0.0.1'
2022-11-27 12:21:00,770 - DEBUG: Detected NetBox API version: None
ERROR: Unable to determine NetBox version, HTTP header 'API-Version' missing.
(.venv) [root@]#

Manual API request

curl -k -H "Authorization: Token $TOKEN" -H "Accept: application/json; indent=4" https://127.0.0.1/api/dcim/sites/
{
    "count": 2,
    "next": null,
    "previous": null,
    "results": [
        {
            "id": 1,
            "url": "https://127.0.0.1/api/dcim/sites/1/",

Sorry for my mistakes, I fixed all syntax errors and now looking good.

2022-11-27 16:32:08,070 - INFO: Completed NetBox Sync in 12 minutes, 9.15 seconds
(venv) [root@netbox-sync]#

[bb-Ricardo]

Hi,

It should work if you remove the quotes around the host fqdn.

[jancovic]

Now I get : ERROR: Unable to determine NetBox version, HTTP header 'API-Version' missing.
even manual API request via curl is working

[bb-Ricardo]

You seem to have disabled TLS in your settings but your curl example address starts with "https".

[jancovic]

Thanks for help, now I got another error : ERROR: Unable to connect to vCenter instance '"my_vcenter"' on port 443. Reason: [Errno -2] Name or service not known, even basic telnet port 443 check is working