Boundary Desktop CLI

Hi,

I have problem with connect boundary via Vault (LDAP):
Vault and boundary are self-hosted.

1 Step: I authenticate in LDAP via Vault
E:\Boundary\resources\app\cli>.\boundary.exe authenticate oidc -auth-method-id=amoidc_I3GQfPTVCx -addr=https://boundary.local:9200 -keyring-type=none
Respone:
Opening returned authentication URL in your browser…

Authentication information:
Account ID: acctoidc_KcyYpm1Epu
Auth Method ID: amoidc_I3GQfPTVCx
Expiration Time: Fri, 24 Feb 2023 15:20:37 CET
User ID: u_1Pn3v1qY7v

Storing the token in a keyring was disabled. The token is:
at_tlkTfDsUuF_s1tC2J7os99LPkxxsCLMiMRZha6GmKXk2ZgG4vDtGpUDHJ5R9D9S4dE8bpvS9dKkKp9BRCwqGwwDEd5PsP633EKyXVsQiqhWB3BwFqfx37aQeKiEpDbrV4Y228Pp8uAtUYrxCTjsU4XPJrekvs
Please be sure to store it safely!

  1. Step: I set env BOUNDARY_TOKEN

  2. Step:
    E:\Boundary\resources\app\cli>.\boundary.exe connect ssh -addr=https://boundary.local:9200 -target-id=ttcp_mu5EYz03wd -host-id=hst_b3IqIsFv8D -token env://BOUNDARY_TOKEN

My Error:
Error from controller when performing authorize-session action against given
target

Error information:
Kind: PermissionDenied
Message: Forbidden.
Status: 403
context: Error from controller when performing authorize-session
action against given target

I couldn’t add screen :slight_smile:

In my enviroment I would like logging via LDPA, but Desktop not working, my diffrent case

Any Ideas? :slight_smile:

Regards,
AN

Hi,

I resolvd problem. I didn’t add principals to project.

Regards,
AN

1 Like