Skip to Content
Version 21.1 by Mark Kohlmann on 2021/10/27 02:21
Show last authors
1 ===== Use ShowRunner version 3.010 or later =====
2
3 Terminology:
4
5 * Client Processor - Processor that will interact with hardware attached to the host procesor.
6 * CWS - Crestron Web Server, the processor's internal web server
7 * Host Processor (Server) - Processor that hosts the physical hardware
8 * LWAPI - Lightweight API (CoAP)
9 * User Page Auth - Requires a username and password to access the internal web server (CWS) on the processor.  3-series always has this enabled if authentication is activated.  4-series processors have an option to have user page auth on or not (default is off).
10
11 Steps:
12
13 1. [[Setup Host Processor>>||anchor="Host processor (LWAPI Server) Setup (DIN-AP3 @ 10.44.5.91)"]]
14 11. Verify processor configuration
15 11. Verify LWAPI is enabled
16 11. Create API User
17 11. Create CWS User (if necessary)
18 11. Save the configuration
19 1. [[Setup Client Processor>>||anchor="Client processor (LWAPI Client) Setup (DIN-AP4) Version 3.011 or newer"]]
20 11. Define the remote system
21 11. Setup auth for the remote system
22 11. Save the configuration
23
24 ===== Host processor (LWAPI Server) Setup (DIN-AP3 @ 10.44.5.91) =====
25
26 Steps 1-3 and 5 always needed.
27
28 1. If 3-series, Enable Authentication [##authentication on##] or SSL [##ssl self##] if not already enabled.  4-Series have authentication enabled by default.  User Page Auth should be turned off on 4-series.
29 1. Enable LWAPI
30 From Console (v 3.011 or later):
31 ## sr lwapi enable true##
32 In Config (@ root level):
33 ## "LwApiEnable": true,
34 "LwApiSecurityLevel": "Auth",##
35 1. Create an API User and record the Key and Secret.  User group must have //LWAPI //role and //Execute //permissions.  This allows the  //Lightweight API Users// group has been created for this purpose:
36 ##DIN-AP3>sradmin add api user "Central Control" "Lightweight API Users"
37 API User Central Control generated with Group permissions Lightweight API Users and Key: (% style="color:blue" %)**YTd2pQn7sjwiOWD9NqCIWw**(%%) Secret: (% style="color:orange" %)**OeiQEFo_-EDfc7sQe_qRpeQzSkZjylV2roa76utpJLI**(%%)##
38 1. If 3-series w/ auth enabled or 4-series with user page auth enabled then add a remote user with permissions to connect to the control system.  This is done by adding a local user to the system with user privileges.  Sample values shown, do not re-use these.
39 ##DIN-AP3>adduser -N:(% style="color:purple" %)**lwapi**(%%) -P:(% style="color:darkgoldenrod" %)**dMFN9pJJXjWLGd7t**(%%)
40 User account was successfully created.
41 DIN-AP3>addusertogroup -N:lwapi -G:Users
42 'lwapi' was successfully added to group 'Users'.##
43 1. Save the configuration
44
45 ===== Client processor (LWAPI Client) Setup (DIN-AP4) Version 3.011 or newer =====
46
47 Steps 1-3 and 6 always needed.
48
49 1. Define remote system in the config:
50 ## {
51 "SystemId": (% style="color:darkcyan" %)1(%%),
52 "IpAddressOrHostname": "10.44.5.91",
53 "Label": "HUB-1-1",
54 "ConnectionType": "LWAPI"
55 },##
56 1. Add Users :
57 if CWS User is not needed:
58 ##DIN-AP4>sr remote system auth (% style="color:darkcyan" %)**1**(%%) (% style="color:blue" %)**YTd2pQn7sjwiOWD9NqCIWw**(%%) (% style="color:orange" %)**OeiQEFo_-EDfc7sQe_qRpeQzSkZjylV2roa76utpJLI**(%%)##
59 if CWS User is needed:
60 ##DIN-AP4>sr remote system auth (% style="color:darkcyan" %)**1**(%%) (% style="color:blue" %)**YTd2pQn7sjwiOWD9NqCIWw**(%%) (% style="color:orange" %)**OeiQEFo_-EDfc7sQe_qRpeQzSkZjylV2roa76utpJLI **(% style="color:purple" %)**lwapi**(%%)** (% style="color:darkgoldenrod" %)dMFN9pJJXjWLGd7t(%%)**
61 Success##
62 1. Save the configuration
63
64 ===== Client processor (LWAPI Client) Setup (DIN-AP4) Version 3.010 or earlier =====
65
66 Steps 1-3 and 6 always needed.
67
68 1. Define remote system in the config:
69 ## {
70 "SystemId": (% style="color:darkcyan" %)1(%%),
71 "IpAddressOrHostname": "10.44.5.91",
72 "Label": "HUB-1-1",
73 "ConnectionType": "LWAPI"
74 },##
75 1. Add remote user for LWAPI (this is the key and secret created on the host):
76 ##DIN-AP4>sradmin add remote user HUB-1 (% style="color:blue" %)**YTd2pQn7sjwiOWD9NqCIWw**(%%) (% style="color:orange" %)**OeiQEFo_-EDfc7sQe_qRpeQzSkZjylV2roa76utpJLI**(%%)
77 Remote User HUB-1 ((% style="color:green" %)//**1a920b8b-3ab8-44bd-bc7b-0fc77abf0a13**//(%%)) added with Group permissions Remote Connection##
78 1. Assign users to the remote connection, System ID in this example is 1.  API user is to authenticate with the API.  CWS user is to authenticate with the Crestron Web Server before authenticating with the ShowRunner REST API:
79 ##DIN-AP4>sradmin assign remote user API (% style="color:darkcyan" %)**1**(%%) (% style="color:green" %)//**1a920b8b-3ab8-44bd-bc7b-0fc77abf0a13**//(%%)##
80 ##User HUB-1 assigned to remote system 1:HUB-1-1 for API Authorization##
81
82 1. If 3-series w/ auth enabled or 4-series with user page auth enabled then add a remote user with permissions to connect to the control system.
83 ##DIN-AP4>sradmin add remote user HUB-1_CWS (% style="color:purple" %)**lwapi**(%%)** (% style="color:darkgoldenrod" %)dMFN9pJJXjWLGd7t(%%)**
84 Remote User HUB-1_CWS ((% style="color:red" %)//**d7c88ecb-7212-4e8b-8749-ddca759c6a62**//(%%)) added with Group permissions Remote Connectio##
85 1. If Necessary:
86 ##DIN-AP4>sradmin assign remote user CWS (% style="color:darkcyan" %)**1**(%%) (% style="color:red" %)//**d7c88ecb-7212-4e8b-8749-ddca759c6a62**//(%%)
87 User HUB-1_CWS assigned to remote system 1:HUB-1-1 for API Authorization##
88 1. Save the configuration and restart ShowRunner™