# Boundary Desktop CLI

**URL:** <https://discuss.hashicorp.com/t/boundary-desktop-cli/50345>\
**Category:** Boundary\
**Created:** [February 17, 2023, 2:25pm UTC](https://discuss.hashicorp.com/t/boundary-desktop-cli/50345 "2023-02-17T14:25:08Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![adis3421](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/adis3421/32/33191_2.png) [@adis3421](https://discuss.hashicorp.com/u/adis3421)\
**Post date:** [February 17, 2023, 2:25pm UTC](https://discuss.hashicorp.com/t/boundary-desktop-cli/50345/1 "2023-02-17T14:25:08Z")

</div>

Hi,

I have problem with connect boundary via Vault (LDAP):  
Vault and boundary are self-hosted.

1 Step: I authenticate in LDAP via Vault  
E:\Boundary\resources\app\cli\>.\boundary.exe authenticate oidc -auth-method-id=amoidc\_I3GQfPTVCx -addr=[https://boundary.local:9200](https://boundary.local:9200) -keyring-type=none  
Respone:  
Opening returned authentication URL in your browser…

Authentication information:  
Account ID: acctoidc\_KcyYpm1Epu  
Auth Method ID: amoidc\_I3GQfPTVCx  
Expiration Time: Fri, 24 Feb 2023 15:20:37 CET  
User ID: u\_1Pn3v1qY7v

Storing the token in a keyring was disabled. The token is:  
at\_tlkTfDsUuF\_s1tC2J7os99LPkxxsCLMiMRZha6GmKXk2ZgG4vDtGpUDHJ5R9D9S4dE8bpvS9dKkKp9BRCwqGwwDEd5PsP633EKyXVsQiqhWB3BwFqfx37aQeKiEpDbrV4Y228Pp8uAtUYrxCTjsU4XPJrekvs  
Please be sure to store it safely!

1. Step: I set env BOUNDARY\_TOKEN

2. Step:  
E:\Boundary\resources\app\cli\>.\boundary.exe connect ssh -addr=[https://boundary.local:9200](https://boundary.local:9200) -target-id=ttcp\_mu5EYz03wd -host-id=hst\_b3IqIsFv8D -token env://BOUNDARY\_TOKEN

My Error:  
Error from controller when performing authorize-session action against given  
target

Error information:  
Kind: PermissionDenied  
Message: Forbidden.  
Status: 403  
context: Error from controller when performing authorize-session  
action against given target

I couldn’t add screen 🙂

In my enviroment I would like logging via LDPA, but Desktop not working, my diffrent case

> [@Boundary desktop OIDC via Vault](https://discuss.hashicorp.com/t/boundary-desktop-oidc-via-vault/49108/):
>
> HI, I have problem with authenticate via OICD with boundary desktop when I click “sing in” gets error: Error Authentication Failed In log i have only: { “id”: “3jtgmCbz4X”, “source”: “[https://hashicorp.com/boundary/deb04/controller+worker](https://hashicorp.com/boundary/deb04/controller+worker)”, “specversion”: “1.0”, “type”: “observation”, “data”: { “latency-ms”: 20.433138, “request\_info”: { “id”: “gtraceid\_PxE4JDC7fWB3kfRTxnpf”, “method”: “POST”, “path”: “/v1/auth-methods/amoidc\_tgXx18Ww0V:authenticate”, “client\_ip”: “192.…

Any Ideas? 🙂

Regards,  
AN

---

<div class="post-metadata">

**Author:** ![adis3421](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/adis3421/32/33191_2.png) [@adis3421](https://discuss.hashicorp.com/u/adis3421)\
**Post date:** [February 20, 2023, 6:57am UTC](https://discuss.hashicorp.com/t/boundary-desktop-cli/50345/2 "2023-02-20T06:57:29Z")

</div>

Hi,

I resolvd problem. I didn’t add principals to project.

Regards,  
AN
