The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
"CLINFR0829 Unable to get user permissions" error when TACACS non-local user runs "clish -c" command from Expert mode
| Solution ID |
sk105322 |
| Product |
Security Gateway, Security Management, Multi-Domain Management, ClusterXL, Cluster - 3rd party, VSX |
| Version |
R75.40, R75.40VS, R75.45, R75.46, R75.47, R76, R77, R77.10, R77.20, R77.30 |
| OS |
Gaia |
| Platform / Model |
All |
| Date Created |
23-Mar-2015
|
| Last Modified |
05-Jan-2016
|
Symptoms
When TACACS+ non-local user runs clish -c "some_clish_syntax" command from Expert mode (e.g., clish -c "show interface eth0"), the following errors appear:
[Expert@HostName]# clish -c "some_clish_syntax"
CLINFR0829 Unable to get user permissions.
CLINFR0599 Failed to build ACLs.
The same user is able to execute the required commands when logged in to Clish.
The involved TACACS+ non-local user has enough privileges to execute the required commands.
When TACACS+ non-local user runs clish -c "some_clish_syntax" command from Expert mode (e.g., clish -c "show interface eth0") on VSX Gateway, the following error appears:
[Expert@HostName:0]# clish -c "some_clish_syntax"
CLINFR0220 User is not allowed to access any virtual-system.
Cause
Gaia OS fails to find the RBA role for TACACS+ non-local user.
Solution
|
Note: To view this solution you need to
Sign In
.
|
