PaloAltoNetworks / pan-os-python

The PAN-OS SDK for Python is a package to help interact with Palo Alto Networks devices (including physical and virtualized Next-generation Firewalls and Panorama). The pan-os-python SDK is object oriented and mimics the traditional interaction with the device via the GUI or CLI/API.
https://pan-os-python.readthedocs.io
ISC License
344 stars 170 forks source link

Not able to commit-all with "template" and "admins" #515

Open clawsoon opened 1 year ago

clawsoon commented 1 year ago

When I try to commit-all with:

pano = panorama.Panorama(hostname=panohost, api_key=api_key)
cmd = panorama.PanoramaCommitAll(

        style="template",
        name=template_name,
        admins=[api_user],
)
pano.commit(cmd=cmd, sync=True, sync_all=True, exception=True)

...I get this error:

Traceback (most recent call last):
  File "/usr/local/lib/python3.6/site-packages/panos/base.py", line 3878, in method
    super_method(self, *args, **kwargs)
  File "/root/.local/lib/python3.6/site-packages/pan/xapi.py", line 902, in commit
    raise PanXapiError(self.status_detail)
  pan.xapi.PanXapiError:  commit-all -> template -> admin unexpected here
 commit-all -> template  is unexpected
 commit-all  is unexpected

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "committest.py", line 31, in <module>
    pano.commit(cmd=cmd, sync=True, sync_all=True, exception=True)
  File "/usr/local/lib/python3.6/site-packages/panos/base.py", line 4770, in commit
    sync=sync, exception=exception, cmd=cmd, admins=admins, sync_all=sync_all
  File "/usr/local/lib/python3.6/site-packages/panos/base.py", line 4851, in _commit
    retry_on_peer=True,
  File "/usr/local/lib/python3.6/site-packages/panos/base.py", line 3899, in method
    raise the_exception
panos.errors.PanDeviceXapiError:  commit-all -> template -> admin unexpected here
 commit-all -> template  is unexpected
 commit-all  is unexpected

Am I doing something wrong, or is the API doing something wrong?

This is against a Panorama and firewalls which are all 11.0.1, and pan-os-python-1.11.0, pan-python-0.17.0.

Thanks.

welcome-to-palo-alto-networks[bot] commented 1 year ago

:tada: Thanks for opening your first issue here! Welcome to the community!