Remote CLI command returns error "Error parsing message"

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

We are trying to use the remote CLI, but any command we run gives the same "Error parsing message" error. Example:

 

capam_command capam=ServerName adminUserID=super cmdName=getErrorCodes

Enter password:

Oct 30, 2020 11:24:13 PM java.util.logging.LogManager$RootLogger log
SEVERE: Error parsing message.
org.xmlpull.v1.a: expected: /BODY read: HTML (position:END_TAG </HTML>@34:8 in [email protected])
        at org.a.a.a.b(Unknown Source)
        at org.a.a.a.a(Unknown Source)
        at org.a.a.a.d(Unknown Source)
        at org.a.a.a.c(Unknown Source)
        at org.a.a.a.next(Unknown Source)
        at com.cloakware.cspm.server.app.c.a(SourceFile:74)
        at com.cloakware.cspm.server.app.c.<init>(SourceFile:32)
        at com.cloakware.cspm.server.ui.CommandLineInterface.a(SourceFile:290)
        at com.cloakware.cspm.server.ui.CommandLineInterface.execute(SourceFile:213)
        at com.cloakware.cspm.server.ui.CommandLineInterface.main(SourceFile:111)

null

Environment

Release : 3.4.x, 4.0.x, 4.1.x

Component : PRIVILEGED ACCESS MANAGEMENT

Cause

The remote CLI was not enabled on the PAM server. In that case the PAM server rejects the request and the response from the server is not in the expected format.

Resolution

Enable the remote CLI following instructions in our online documentation, such as for 4.1.0 on page:

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/privileged-access-manager/4-1/programming/credential-manager-remote-cli-and-java-api/install-and-set-up-the-remote-cli-and-java-api.html

under section "Enable the Credential Manager CLI":

PAM UI >> Configuration >> Security >> Access >> Access Tab >> Credential Management CLI >> Please make sure you set this to enabled.