App Control: Dascli got Permission Denied even the password was accepted

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

Dascli got permission denied even though the password was accepted

Environment

• App Control Agent: All Versions
• Windows
• MacOS
• Linux

Cause

Log shows

b9GlobalStore::GetCLIAccessAllowed: Pid[2FC8], found authenticated session, but SID S-xxxxx-0001 does not match S-xxxxx-0002

 

The code only supports one user per session id.

Resolution

• On a future version, DASCLI authentication will be user-based.
• To work around this issue, either a) do not run the status batch file in a second command prompt or b) make sure that it is running under the same user.