"CLINFR0829 Unable to get user permissions" error when TACACS non-local user runs "clish -c" command from Expert mode

Support Center > Search Results > SecureKnowledge Details

Solution ID	sk105322
Product	Security Gateway, Security Management, Multi-Domain Management, ClusterXL, Cluster - 3rd party, VSX
Version	R75.40, R75.40VS, R75.45, R75.46, R75.47, R76, R77, R77.10, R77.20, R77.30
OS	Gaia
Platform / Model	All
Date Created	23-Mar-2015
Last Modified	05-Jan-2016

Symptoms

When TACACS+ non-local user runs clish -c "some_clish_syntax" command from Expert mode (e.g., clish -c "show interface eth0"), the following errors appear:
```
[Expert@HostName]# clish -c "some_clish_syntax"
CLINFR0829  Unable to get user permissions.
CLINFR0599  Failed to build ACLs.
```
The same user is able to execute the required commands when logged in to Clish.
The involved TACACS+ non-local user has enough privileges to execute the required commands.
When TACACS+ non-local user runs clish -c "some_clish_syntax" command from Expert mode (e.g., clish -c "show interface eth0") on VSX Gateway, the following error appears:
```
[Expert@HostName:0]# clish -c "some_clish_syntax"
CLINFR0220  User is not allowed to access any virtual-system.
```

Cause

Gaia OS fails to find the RBA role for TACACS+ non-local user.

Solution

Note: To view this solution you need to Sign In .