Symantec Privileged Access Management

 View Only
  • 1.  CLI addGroup Group.description support for spaces

    Posted Jun 13, 2019 12:02 PM
    I've been running the following CLI command

    capam_command.bat capam=capam adminUserID=xzxz adminPassword=*** cmdName=addGroup Group.name=Some_name_with_underscores Group.description="Some Text With Spaces surrounded by Quotes" Group.type=target

     When i run that command it's successful, but only sets the description to the first word 'Some' - it seems to disregard the fact that the description argument has a value surrounded by quotes.

    <CommandResult>
    <cr.itemNumber>0</cr.itemNumber>
    <cr.statusCode>400</cr.statusCode>
    <cr.statusDescription>Success.</cr.statusDescription>
    <cr.result>
          <Group>
          <dynamic>true</dynamic>
          <description>Some</description>
          <filters>[]</filters>
          <name>Some_name_with_underscores</name>
          <permissions>[]</permissions>
          <type>target</type>
          <readOnly>false</readOnly>
          <createDate>Thu Jun 13 15:33: 22 UTC 2019</createDate>
          <createTime>1560440002040</createTime>
          <updateDate>Thu Jun 13 15:33:22 UTC 2019</updateDate>
          <extensionType></extensionType>
          <createUser>Xzxzxzxzxzxx</createUser>
          <hash>7VlsbwMQ4HttUn5d5uGdfVA+tdc=</hash>
          <updateTime>1560440002040</updateTime>
          <updateUser>Xzxzxzxzxzxx</updateUser>
          <ID>1232</ID>
          </Group>
    </cr.result>
    </CommandResult>


    I've tried surrounding the Target Group Description by
    • Single quotes ' '
    • Brackets { }
    • Tick marks ` `
    • Square Brackets [ ]
    • Parens ()

     
    But, in those cases I'm always met with the following error
    <cr.statusCode>3955</cr.statusCode>
    <cr.statusDescription>PAM-CM-0861: Group description must consist of characters [a-z, A-Z, 0-9].</cr.statusDescription>

     
    So what's the correct way of doing this.

    ------------------------------
    Services Architect
    HCL Technologies Ltd
    ------------------------------


  • 2.  RE: CLI addGroup Group.description support for spaces
    Best Answer

    Broadcom Employee
    Posted Jun 14, 2019 12:15 PM
    Per the documentation at https://docops.ca.com/ca-privileged-access-manager/3-3/EN/programming/credential-manager-remote-cli-and-java-api/use-the-credential-manager-cli/remote-cli-command-syntax
    • If a parameter value contains a space, enclose the entire value pair definition in quotes. For example, enter "TargetApplication.name=AWS Access Credential Accounts" rather than TargetApplication.name="AWS Access Credential Accounts".



  • 3.  RE: CLI addGroup Group.description support for spaces

    Posted Jun 17, 2019 09:31 AM
    ​Thanks Joseph, I'll give that a try. 

    Perhaps we should update the documentation for each command:
    See
    addGroup & addUserGroup and the like.



    ------------------------------
    Services Architect
    HCL Technologies Ltd
    ------------------------------