taers232c
commented
1 year ago David,
Do: gam oauth delete gam oauth create
Ross
On Tue, Feb 28, 2023 at 4:00 PM David Severance @.***> wrote:
The issue tracker is for reporting product deficiencies. "How do I?" questions should be posted to the discussion forum at https://groups.google.com/group/google-apps-manager. When in doubt, start at the discussion forum and return here only when instructed to do so.
Please confirm the following:
- I have upgraded to the latest GAM release from https://github.com/GAM-team/GAM/releases and I still have this issue. YES
- I am typing the command as described in the GAM Wiki at https://github.com/GAM-team/GAM/wiki YES
Full steps to reproduce the issue:
- gam user sev show vacation
Expected outcome (what are you trying to do?):
The vacation settings
Actual outcome (what errors or bad behavior do you see instead?):
ERROR: User @.***: unauthorized_client: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested.
I also did this to validate my service account...
@. gam]# ./gam user oit-eus-igs-ga check serviceaccount Computer clock status: Your system time differs from admin.googleapis.com by less than 1 second PASS Service Account Private Key Authentication: Authenticating... PASS Checking key age. Google recommends rotating keys on a routine basis... Your key is old. Recommend running "gam rotate sakey" to get a new key Key is 89 days old WARN Domain-Wide Delegation authentication as @.: https://mail.google.com/ PASS https://www.googleapis.com/auth/apps.alerts PASS https://www.googleapis.com/auth/calendar PASS https://www.googleapis.com/auth/cloud-identity PASS https://www.googleapis.com/auth/drive PASS https://www.googleapis.com/auth/drive.activity PASS https://www.googleapis.com/auth/gmail.settings.basic PASS https://www.googleapis.com/auth/gmail.settings.sharing PASS https://www.googleapis.com/auth/spreadsheets PASS
All scopes passed! Service account 100320192155763691457 is fully authorized. @.*** gam]#
The service account client ID matches too. This all used to work earlier this year until I tried it today.
— Reply to this email directly, view it on GitHub https://github.com/GAM-team/GAM/issues/1608, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACCTYL3FSDEFMKTPLA2LQZLWZ2GRNANCNFSM6AAAAAAVLLZAEQ . You are receiving this because you are subscribed to this thread.Message ID: @.***>
-- Ross Scroggs @.***
davidsev7
The issue tracker is for reporting product deficiencies. "How do I?" questions should be posted to the discussion forum at https://groups.google.com/group/google-apps-manager. When in doubt, start at the discussion forum and return here only when instructed to do so.
Please confirm the following:
Full steps to reproduce the issue:
Expected outcome (what are you trying to do?):
The vacation settings
Actual outcome (what errors or bad behavior do you see instead?):
ERROR: User sev@uci.edu: unauthorized_client: Client is unauthorized to retrieve access tokens using this method, or client not authorized for any of the scopes requested.
I also did this to validate my service account...
[root@igs1 gam]# ./gam user oit-eus-igs-ga check serviceaccount Computer clock status: Your system time differs from admin.googleapis.com by less than 1 second PASS Service Account Private Key Authentication: Authenticating... PASS Checking key age. Google recommends rotating keys on a routine basis... Your key is old. Recommend running "gam rotate sakey" to get a new key Key is 89 days old WARN Domain-Wide Delegation authentication as oit-eus-igs-ga@uci.edu: https://mail.google.com/ PASS https://www.googleapis.com/auth/apps.alerts PASS https://www.googleapis.com/auth/calendar PASS https://www.googleapis.com/auth/cloud-identity PASS https://www.googleapis.com/auth/drive PASS https://www.googleapis.com/auth/drive.activity PASS https://www.googleapis.com/auth/gmail.settings.basic PASS https://www.googleapis.com/auth/gmail.settings.sharing PASS https://www.googleapis.com/auth/spreadsheets PASS
All scopes passed! Service account 100320192155763691457 is fully authorized. [root@igs1 gam]#
The service account client ID matches too. This all used to work earlier this year until I tried it today.