Symantec Privileged Access Management

 View Only

 Remote CLI date settings

MARUBUN SUPPORT's profile image
MARUBUN SUPPORT posted Aug 07, 2024 03:27 AM
Hi Team,
 
[Product]
PAM 4.1.7 & remoteCLI-4.1.7
 
[Question]
There is a command in RemoteCLI to set the date.
When specifying a date, the following error occurs:
 
capam_command capam=FQDN adminUserID=USER adminPassword=PASS cmdName=searchPasswordViewRequest
 "PasswordViewRequest.requestPeriodStart=2024-08-01 08:00" "PasswordViewRequest.requestPeriodEnd=2024-08-02 08:00"
 
<CommandResult><cr.itemNumber>0</cr.itemNumber><cr.statusCode>4623</cr.statusCode><cr.statusDescription>
PAM-CM-1063: The password request dates specified are invalid. PasswordViewRequest.requestPeriodStart is invalid
</cr.statusDescription><cr.result></cr.result></CommandResult>
 
So I changed it to the following and the error went away:
 
capam_command capam=FQDN adminUserID=USER adminPassword=PASS cmdName=searchPasswordViewRequest
 ""PasswordViewRequest.requestPeriodStart=2024-08-01 08:00"" ""PasswordViewRequest.requestPeriodEnd=2024-08-02 08:00""
 
or
 
capam_command capam=FQDN adminUserID=USER adminPassword=PASS cmdName=searchPasswordViewRequest
 ""PasswordViewRequest.requestPeriodStart=2024-08-01 08:00"" "PasswordViewRequest.requestPeriodEnd=2024-08-02 08:00"
<CommandResult><cr.itemNumber>0</cr.itemNumber><cr.statusCode>400</cr.statusCode><cr.statusDescription>
Success.</cr.statusDescription></CommandResult>
It seems that the requestPeriodStart parameter needs to be doubled.
Is this the correct way to do it and is it working correctly?
Thanks,
Ralf Prigl's profile image
Broadcom Employee Ralf Prigl

Hello, Please review documentation page searchPasswordViewRequest. The correct date format is "YYYY-MM-DD HH:MM:SS", not "YYYY-MM-DD HH:MM". This was documented incorrectly in older PAM documentation versions, but has been fixed recently.

MARUBUN SUPPORT's profile image
MARUBUN SUPPORT
Thank you for your answer.
One more thing.
Is it okay to specify these parameters by enclosing them all in " "?
Correct
"PasswordViewRequest.requestPeriodStart=2024-08-01 9:00:00"
Incorrect
PasswordViewRequest.requestPeriodStart="2024-08-01 9:00:00"
Thanks,
Ralf Prigl's profile image
Broadcom Employee Ralf Prigl

In my Linux shell either one works and something that works doesn't qualify as "incorrect" for me. The example in the documentation page mentioned before encloses the full argument in quotes, such as "PasswordViewRequest.requestPeriodStart=2024-08-01 9:00:00".