"CLINFR0829 Unable to get user permissions" error when TACACS non-local user runs "clish -c" command from Expert mode

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk105322
Technical Level
Product	Quantum Security Gateways, Quantum Security Management, Multi-Domain Security Management, ClusterXL, Cluster - 3rd party, VSX
Version	R75.40 (EOL), R75.40VS (EOL), R75.45 (EOL), R75.46 (EOL), R75.47 (EOL), R76 (EOL), R77 (EOL), R77.10 (EOL), R77.20, R77.30 (EOL)
OS	Gaia
Platform / Model	All
Date Created	23-Mar-2015
Last Modified	05-Jan-2016

Symptoms

When TACACS+ non-local user runs clish -c "some_clish_syntax" command from Expert mode (e.g., clish -c "show interface eth0"), the following errors appear:
```
[Expert@HostName]# clish -c "some_clish_syntax"
CLINFR0829  Unable to get user permissions.
CLINFR0599  Failed to build ACLs.
```
The same user is able to execute the required commands when logged in to Clish.
The involved TACACS+ non-local user has enough privileges to execute the required commands.
When TACACS+ non-local user runs clish -c "some_clish_syntax" command from Expert mode (e.g., clish -c "show interface eth0") on VSX Gateway, the following error appears:
```
[Expert@HostName:0]# clish -c "some_clish_syntax"
CLINFR0220  User is not allowed to access any virtual-system.
```

Cause

Gaia OS fails to find the RBA role for TACACS+ non-local user.

Solution

Note: To view this solution you need to Sign In .