Skip to Content
Last modified by Alexander Mott on 2023/07/07 15:17
From version 11.1
edited by Mark Kohlmann
on 2021/07/26 23:46
Change comment: There is no comment for this version
To version 21.1
edited by Mark Kohlmann
on 2021/10/27 02:21
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -1,22 +1,52 @@
1 +===== Use ShowRunner version 3.010 or later =====
2 +
3 +Terminology:
4 +
5 +* Client Processor - Processor that will interact with hardware attached to the host procesor.
6 +* CWS - Crestron Web Server, the processor's internal web server
7 +* Host Processor (Server) - Processor that hosts the physical hardware
8 +* LWAPI - Lightweight API (CoAP)
9 +* User Page Auth - Requires a username and password to access the internal web server (CWS) on the processor.  3-series always has this enabled if authentication is activated.  4-series processors have an option to have user page auth on or not (default is off).
10 +
11 +Steps:
12 +
13 +1. [[Setup Host Processor>>||anchor="Host processor (LWAPI Server) Setup (DIN-AP3 @ 10.44.5.91)"]]
14 +11. Verify processor configuration
15 +11. Verify LWAPI is enabled
16 +11. Create API User
17 +11. Create CWS User (if necessary)
18 +11. Save the configuration
19 +1. [[Setup Client Processor>>||anchor="Client processor (LWAPI Client) Setup (DIN-AP4) Version 3.011 or newer"]]
20 +11. Define the remote system
21 +11. Setup auth for the remote system
22 +11. Save the configuration
23 +
1 1  ===== Host processor (LWAPI Server) Setup (DIN-AP3 @ 10.44.5.91) =====
2 2  
3 -* If 3-series, Enable Authentication [##authentication on##] or SSL [##ssl self##] if not already enabled.  4-Series have authentication enabled by default.  User Page Auth should be turned off on 4-series.
4 -* Enable LWAPI In Config (@ root level):
26 +Steps 1-3 and 5 always needed.
27 +
28 +1. If 3-series, Enable Authentication [##authentication on##] or SSL [##ssl self##] if not already enabled.  4-Series have authentication enabled by default.  User Page Auth should be turned off on 4-series.
29 +1. Enable LWAPI
30 +From Console (v 3.011 or later):
31 +## sr lwapi enable true##
32 +In Config (@ root level):
5 5  ## "LwApiEnable": true,
6 6   "LwApiSecurityLevel": "Auth",##
7 -* Create an API User and record the Key and Secret.  User group must have //LWAPI //role and //Execute //permissions.  //Lightweight API Users// group has been created for this purpose:
35 +1. Create an API User and record the Key and Secret.  User group must have //LWAPI //role and //Execute //permissions.  This allows the  //Lightweight API Users// group has been created for this purpose:
8 8  ##DIN-AP3>sradmin add api user "Central Control" "Lightweight API Users"
9 9  API User Central Control generated with Group permissions Lightweight API Users and Key: (% style="color:blue" %)**YTd2pQn7sjwiOWD9NqCIWw**(%%) Secret: (% style="color:orange" %)**OeiQEFo_-EDfc7sQe_qRpeQzSkZjylV2roa76utpJLI**(%%)##
10 -* If 3-series w/ auth enabled or 4-series with user page auth enabled then add a remote user with permissions to connect to the control system.  This is done by adding a local user to the system with connect privileges.  Sample values shown, do not re-use these.
38 +1. If 3-series w/ auth enabled or 4-series with user page auth enabled then add a remote user with permissions to connect to the control system.  This is done by adding a local user to the system with user privileges.  Sample values shown, do not re-use these.
11 11  ##DIN-AP3>adduser -N:(% style="color:purple" %)**lwapi**(%%) -P:(% style="color:darkgoldenrod" %)**dMFN9pJJXjWLGd7t**(%%)
12 12  User account was successfully created.
13 -DIN-AP3>addusertogroup -N:lwapi -G:Connects
14 -'lwapi' was successfully added to group 'Connects'.##
15 -* Save the configuration
41 +DIN-AP3>addusertogroup -N:lwapi -G:Users
42 +'lwapi' was successfully added to group 'Users'.##
43 +1. Save the configuration
16 16  
17 -===== Client processor (LWAPI Client) Setup (DIN-AP4) =====
45 +===== Client processor (LWAPI Client) Setup (DIN-AP4) Version 3.011 or newer =====
18 18  
19 -* Define remote system in the config:
47 +Steps 1-3 and 6 always needed.
48 +
49 +1. Define remote system in the config:
20 20  ## {
21 21   "SystemId": (% style="color:darkcyan" %)1(%%),
22 22   "IpAddressOrHostname": "10.44.5.91",
... ... @@ -23,16 +23,36 @@
23 23   "Label": "HUB-1-1",
24 24   "ConnectionType": "LWAPI"
25 25   },##
26 -* Add remote user for LWAPI (this is the key and secret created on the host):
56 +1. Add Users :
57 +if CWS User is not needed:
58 +##DIN-AP4>sr remote system auth (% style="color:darkcyan" %)**1**(%%) (% style="color:blue" %)**YTd2pQn7sjwiOWD9NqCIWw**(%%) (% style="color:orange" %)**OeiQEFo_-EDfc7sQe_qRpeQzSkZjylV2roa76utpJLI**(%%)##
59 +if CWS User is needed:
60 +##DIN-AP4>sr remote system auth (% style="color:darkcyan" %)**1**(%%) (% style="color:blue" %)**YTd2pQn7sjwiOWD9NqCIWw**(%%) (% style="color:orange" %)**OeiQEFo_-EDfc7sQe_qRpeQzSkZjylV2roa76utpJLI **(% style="color:purple" %)**lwapi**(%%)** (% style="color:darkgoldenrod" %)dMFN9pJJXjWLGd7t(%%)**
61 +Success##
62 +1. Save the configuration
63 +
64 +===== Client processor (LWAPI Client) Setup (DIN-AP4) Version 3.010 or earlier =====
65 +
66 +Steps 1-3 and 6 always needed.
67 +
68 +1. Define remote system in the config:
69 +## {
70 + "SystemId": (% style="color:darkcyan" %)1(%%),
71 + "IpAddressOrHostname": "10.44.5.91",
72 + "Label": "HUB-1-1",
73 + "ConnectionType": "LWAPI"
74 + },##
75 +1. Add remote user for LWAPI (this is the key and secret created on the host):
27 27  ##DIN-AP4>sradmin add remote user HUB-1 (% style="color:blue" %)**YTd2pQn7sjwiOWD9NqCIWw**(%%) (% style="color:orange" %)**OeiQEFo_-EDfc7sQe_qRpeQzSkZjylV2roa76utpJLI**(%%)
28 28  Remote User HUB-1 ((% style="color:green" %)//**1a920b8b-3ab8-44bd-bc7b-0fc77abf0a13**//(%%)) added with Group permissions Remote Connection##
29 -* If 3-series w/ auth enabled or 4-series with user page auth enabled then add a remote user with permissions to connect to the control system.
30 -##DIN-AP4>sradmin add remote user HUB-1_CWS (% style="color:purple" %)**lwapi**(%%)** (% style="color:darkgoldenrod" %)dMFN9pJJXjWLGd7t(%%)**
31 -Remote User HUB-1_CWS ((% style="color:red" %)//**d7c88ecb-7212-4e8b-8749-ddca759c6a62**//(%%)) added with Group permissions Remote Connection##
32 -* Assign users to the remote connection, System ID in this example is 1.  API user is to authenticate with the API.  CWS user is to authenticate with the Crestron Web Server before authenticating with the ShowRunner REST API:
78 +1. Assign users to the remote connection, System ID in this example is 1.  API user is to authenticate with the API.  CWS user is to authenticate with the Crestron Web Server before authenticating with the ShowRunner REST API:
33 33  ##DIN-AP4>sradmin assign remote user API (% style="color:darkcyan" %)**1**(%%) (% style="color:green" %)//**1a920b8b-3ab8-44bd-bc7b-0fc77abf0a13**//(%%)##
34 34  ##User HUB-1 assigned to remote system 1:HUB-1-1 for API Authorization##
35 -If Necessary:
81 +
82 +1. If 3-series w/ auth enabled or 4-series with user page auth enabled then add a remote user with permissions to connect to the control system.
83 +##DIN-AP4>sradmin add remote user HUB-1_CWS (% style="color:purple" %)**lwapi**(%%)** (% style="color:darkgoldenrod" %)dMFN9pJJXjWLGd7t(%%)**
84 +Remote User HUB-1_CWS ((% style="color:red" %)//**d7c88ecb-7212-4e8b-8749-ddca759c6a62**//(%%)) added with Group permissions Remote Connectio##
85 +1. If Necessary:
36 36  ##DIN-AP4>sradmin assign remote user CWS (% style="color:darkcyan" %)**1**(%%) (% style="color:red" %)//**d7c88ecb-7212-4e8b-8749-ddca759c6a62**//(%%)
37 37  User HUB-1_CWS assigned to remote system 1:HUB-1-1 for API Authorization##
38 -* Save the configuration and restart ShowRunner™
88 +1. Save the configuration and restart ShowRunner™