Discard session

[Michael_Nemeth]

Hi Guys

I tried to google but I did not find answer... 

Why I cannot discart my older session with API? I have MDS on R80.30 Jumbo Take 191

mgmt_cli --user mnemeth-API --password xxxx --domain EMEA-SK-SFM show session uid fb15eb0f-4058-453e-bf1f-09f7c37b1b2a
uid: "fb15eb0f-4058-453e-bf1f-09f7c37b1b2a"
type: "session"
domain:
uid: "97580e66-0b62-6141-8165-01d276c886a9"
name: "EMEA-SK-SFM"
domain-type: "domain"
state: "open"
user-name: "mnemeth-API"
description: ""
last-login-time:
posix: 1589358763596
iso-8601: "2020-05-13T10:32+0200"
expired-session: false
application: "WEB_API"
changes: 0
in-work: true
ip-address: "127.0.0.1"
locks: 0
email: ""
phone-number: ""
connection-mode: "read write"
session-timeout: 600
comments: ""
color: "black"
icon: "Objects/worksession"
tags: []
meta-info:
lock: "unlocked"
validation-state: "ok"
last-modify-time:
posix: 1589358763604
iso-8601: "2020-05-13T10:32+0200"
last-modifier: "mnemeth-API"
creation-time:
posix: 1589358763500
iso-8601: "2020-05-13T10:32+0200"
creator: "mnemeth-API"
read-only: true

[Expert@SKBTS1FWMSFM01:0]# mgmt_cli --user mnemeth-API --password xxxx --domain EMEA-SK-SFM discard uid fb15eb0f-4058-453e-bf1f-09f7c37b1b2a
code: "generic_server_error"
message: "Management server failed to execute command"

Thnx 

Michael Nemeth

[PhoneBoy]

Best to engage with the TAC here.

[Timothy_Hall]

What permissions profile is mnemeth-API using, "Read Write All" or "Super User"?  Only a Super User has the ability to publish/discard sessions that may not be their own (as well as manage SmartConsole administrators).  While teaching the CCAS class I've seen this happen many times where insufficient permissions on the account being used via API causes this generic error message you are seeing, instead of the expected 403 Forbidden.