IBM Guardium

IBM Guardium

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  User has insufficient privileges for the request API function error reported when using grdapi change_cli_password - v11.5[575]

    Posted yesterday

    Hello Seniors, 

    When using command grdapi change_cli_password  on Guardium CM Appliance to update the password of a CLI user,

    error:

    ERR=9, User has insufficient privileges for the requested API function occurs.

    My Appliance Is on v11.5 Bundle 575 , 4084 Sniff patch. Does anyone has faced the similar Error ? If so , Kindly suggest the fix..



    ------------------------------
    Akashkumar Parmar
    ------------------------------


  • 2.  RE: User has insufficient privileges for the request API function error reported when using grdapi change_cli_password - v11.5[575]

    Posted yesterday

    Hi @Akashkumar Parmar,

    Are you logging in with the bult-in cli account or one of the guardcli ones?



    ------------------------------
    Wendy Zemba
    Sr. Consultant, Data Protection
    Pellera Technologies
    wendy.zemba@pellera.com

    Need help with your Guardium deployment? Contact me directly to discuss engagement opportunities. Currently serving North America.
    ------------------------------



  • 3.  RE: User has insufficient privileges for the request API function error reported when using grdapi change_cli_password - v11.5[575]

    Posted yesterday

    Hi Wendy , 

    I am using default CLI account. I know there Is a bug on v12 BUT this is v11.5. 



    ------------------------------
    Akashkumar Parmar
    ------------------------------



  • 4.  RE: User has insufficient privileges for the request API function error reported when using grdapi change_cli_password - v11.5[575]

    Posted yesterday

    Hi @Akashkumar Parmar,

    When you're logged in as the cli user, use the store user password command.



    ------------------------------
    Wendy Zemba
    Sr. Consultant, Data Protection
    Pellera Technologies
    wendy.zemba@pellera.com

    Need help with your Guardium deployment? Contact me directly to discuss engagement opportunities. Currently serving North America.
    ------------------------------



  • 5.  RE: User has insufficient privileges for the request API function error reported when using grdapi change_cli_password - v11.5[575]

    Posted yesterday

    Hi Wendy,

    Thanks! Can we use this command to distribute same CLI password to rest of the MUs? 



    ------------------------------
    Sincerely,
    Akash Parmar
    Consultant - Data Security
    www.linkedin.com/in/akashkumarparmar
    ------------------------------------
    IBM Guardium Certified
    Thales CipherTrust Data Security Platform Certified Professional Engineer
    Thales Luna HSM Professional Engineer
    BigID Core - Service Engineer
    ------------------------------



  • 6.  RE: User has insufficient privileges for the request API function error reported when using grdapi change_cli_password - v11.5[575]

    Posted yesterday

    Hi Akash,

    After you reset the CM's cli password, you can run support reset-managed-cli. This will prompt the central manager to login to each associated managed unit and set the CLI passwords and expirations to match the passwords and expiration dates as the central manager.



    ------------------------------
    Wendy Zemba
    Sr. Consultant, Data Protection
    Pellera Technologies
    wendy.zemba@pellera.com

    Need help with your Guardium deployment? Contact me directly to discuss engagement opportunities. Currently serving North America.
    ------------------------------



  • 7.  RE: User has insufficient privileges for the request API function error reported when using grdapi change_cli_password - v11.5[575]

    Posted 23 hours ago

    Thank you, Wendy, Appreciate your support. Let me try this... 



    ------------------------------
    Sincerely,
    Akash Parmar
    Consultant - Data Security
    www.linkedin.com/in/akashkumarparmar
    ------------------------------------
    IBM Guardium Certified
    Thales CipherTrust Data Security Platform Certified Professional Engineer
    Thales Luna HSM Professional Engineer
    BigID Core - Service Engineer
    ------------------------------