search

fortinetdev / terraform-provider-fortios

Terraform Fortios provider
https://www.terraform.io/docs/providers/fortios/
Mozilla Public License 2.0
66 stars 48 forks source link

fortios_system_global vdom_mode #260

Open sergey-ostrovskiy opened 1 year ago

sergey-ostrovskiy commented 1 year ago

Unable to activate multi-vdom on fortigate 100F software version 7.0.9 provider fortios providers version 1.16.0 Terraform version 1.3.7 We do it in two ways:

  1. resource "fortios_system_global" "default_global" { hostname="test1" vdom_admin="enable" }

variable vdom_mode { type = string default = "multi-vdom" #"no-vdom", "split-vdom", "multi-vdom" }

resource "fortios_json_generic_api" "test2" { path = "/api/v2/cmdb/system/global" method = "PUT" json = <<EOF { "vdom-mode": "${var.vdom_mode}" } EOF }

In this case, only the hostname changes.

  1. resource "fortios_system_global" "default_global" { hostname="test1" vdom_admin="enable" vdom_mode = "multi vdom" } in this example, we get the error "Error updating SystemGlobal resource: Internal Server Error - Internal error when processing the request (500)"

Please tell me how to solve this problem

MaxxLiu22 commented 1 year ago

Hi @sergey-ostrovskiy ,

Thank you for raising this issue, your code looks good to me, "vdom_mode" would be set to "multi-vdom" to enable vdom mode. I am wondering do you see any CLI returned error msg under "Error updating SystemGlobal resource: Internal Server Error - Internal error when processing the request (500)"? and could you help me try to enable multi-vdom mode through GUI System -> Settings -> Virtual Domains -> Multi VDOM to see if there is any error? Sorry for any inconvenience, and looking for your response.

Thanks, Maxx

sergey-ostrovskiy commented 1 year ago

Hi @MaxxLiu22

Correctly I understood you, do you mean multi-vdom is enabled via CLI? If yes, then it turns on without errors. Through GUI multi-vdom turns on without errors.

MaxxLiu22 commented 1 year ago

Hi @sergey-ostrovskiy ,

I tried with varies version FGT, and not be able to reproduce this issue, could you help me to enable debugging in your CLI with debug, and run your script again to see what can be caught please.

$ diagnose debug enable
$ diagnose debug application httpsd -1
$ diagnose debug cli 8

Thanks, Maxx

minikenshin commented 1 year ago

Hello @MaxxLiu22

We have the same issue on Forti 400F 7.0.11 Here the log you ask (after the YES to confirm the apply) :

[httpsd 6969 - 1683041286 info] fweb_debug_init[417] -- New GET request for "/api/v2/cmdb/system/global" from "10.16.2.25:50070" [httpsd 6969 - 1683041286 info] fweb_debug_init[419] -- User-Agent: "Go-http-client/1.1" [httpsd 6969 - 1683041286 info] fweb_debug_init[421] -- Handler "api_cmdb_v2-handler" assigned to request [httpsd 6969 - 1683041286 warning] api_access_check_for_api_key[688] -- API Key request authorized for terraform_api_admin from 10.16.2.25. [httpsd 6969 - 1683041286 info] api_store_parameter[320] -- add API parameter 'access_token' (type=string) [httpsd 6969 - 1683041286 info] api_cmdb_request_init_by_path[1651] -- new CMDB query (path='system',name='global') [httpsd 6969 - 1683041286 info] api_generate_and_add_etag[1805] -- Per VDOM ETags: [ "vdom: root, hash: 66e975db3d853f6795a9e2736df47c79" ] [httpsd 6969 - 1683041286 info] api_generate_and_add_etag[1810] -- New ETag: C9B7570A17608AD9F3A9CC70B168883A988B02C41EC9C499AA3B5DA2CB93E943 [httpsd 6969 - 1683041286 info] api_generate_request_hash[1690] -- hash_str: { "uri": "\/api\/v2\/cmdb\/system\/global", "params": { "path": "system", "name": "global", "authorized_admin": "terraform_api_admin" } } [httpsd 6969 - 1683041286 info] api_generate_request_hash[1691] -- revisions: [ "vdom: root, hash: 66e975db3d853f6795a9e2736df47c79", "48e9d27f48301ff1750d9e57378f1357" ] [httpsd 6969 - 1683041286 info] get_cache_lock[64] -- Cache: locking /tmp/api_cache/DA818AE440C3DA2FB38691646EE64A91AA5FAF6D925F0DF4A63103C719CE43E7-B4EA7A51BF53E3CC63F0BC8A77659BDFD1C9FCB748E8CB79D7F0D9F64D4E937 (read). [httpsd 6969 - 1683041286 info] get_cache_lock[80] -- Cache: locked /tmp/api_cache/DA818AE440C3DA2FB38691646EE64A91AA5FAF6D925F0DF4A63103C719CE43E7-B4EA7A51BF53E3CC63F0BC8A77659BDFD1C9FCB748E8CB79D7F0D9F64D4E937 (read) [httpsd 6969 - 1683041286 info] api_response_from_cache[1136] -- API response is generated from cache. [httpsd 6969 - 1683041286 info] handle_cli_req_v2[3124] -- returning to original vdom "root" [httpsd 6969 - 1683041286 info] fweb_debug_final[306] -- Completed GET request for "/api/v2/cmdb/system/global" (HTTP 200 OK) [httpsd 6969 - 1683041287 info] fweb_debug_init[417] -- New PUT request for "/api/v2/cmdb/system/global" from "10.16.2.25:50070" [httpsd 6969 - 1683041287 info] fweb_debug_init[419] -- User-Agent: "Go-http-client/1.1" [httpsd 6969 - 1683041287 info] fweb_debug_init[421] -- Handler "api_cmdb_v2-handler" assigned to request [httpsd 6969 - 1683041287 warning] api_access_check_for_api_key[688] -- API Key request authorized for terraform_api_admin from 10.16.2.25. [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'access_token' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-concurrent' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-forticloud-sso-login' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-hsts-max-age' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-https-pki-required' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-https-redirect' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-https-ssl-ciphersuites' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-https-ssl-versions' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-lockout-duration' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-lockout-threshold' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-login-max' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-maintainer' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-port' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-restrict-local' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-scp' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-server-cert' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-sport' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-ssh-grace-time' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-ssh-password' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-ssh-port' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-ssh-v1' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-telnet' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admin-telnet-port' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'admintimeout' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'alias' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'allow-traffic-redirect' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'anti-replay' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'arp-max-entry' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'auth-cert' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'auth-http-port' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'auth-https-port' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'auth-ike-saml-port' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'auth-keepalive' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'auth-session-limit' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'auto-auth-extension-device' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'autorun-log-fsck' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'av-affinity' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'av-failopen' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'av-failopen-session' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'batch-cmdb' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'block-session-timer' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'br-fdb-max-entry' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'cert-chain-max' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'cfg-revert-timeout' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'cfg-save' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'check-protocol-header' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'check-reset-range' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'cli-audit-log' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'cloud-communication' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'clt-cert-req' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'cmdbsvr-affinity' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'cpu-use-threshold' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'csr-ca-attribute' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'daily-restart' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'default-service-source-port' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'device-idle-timeout' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'dh-params' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'dnsproxy-worker-count' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'dst' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'early-tcp-npu-session' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'edit-vdom-prompt' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'extender-controller-reserved-network' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'failtime' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'faz-disk-buffer-size' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'fds-statistics' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'fds-statistics-period' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'fortiextender' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'fortiextender-data-port' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'fortiextender-discovery-lockdown' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'fortiextender-vlan-mode' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'fortiservice-port' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'fortitoken-cloud' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'gui-allow-default-hostname' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'gui-cdn-usage' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'gui-certificates' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'gui-custom-language' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'gui-date-format' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'gui-date-time-source' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'gui-display-hostname' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'gui-firmware-upgrade-warning' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'gui-forticare-registration-setup-warning' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'gui-fortigate-cloud-sandbox' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'gui-fortiguard-resource-fetch' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'gui-ipv6' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'gui-local-out' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'gui-replacement-message-groups' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'gui-rest-api-cache' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'gui-theme' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'gui-wireless-opensecurity' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'ha-affinity' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'honor-df' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'hostname' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'igmp-state-limit' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'internet-service-database' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'interval' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'ip-src-port-range' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'ipsec-asic-offload' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'ipsec-ha-seqjump-rate' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'ipsec-hmac-offload' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'ipsec-soft-dec-async' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'ipv6-accept-dad' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'ipv6-allow-anycast-probe' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'ipv6-allow-local-in-slient-drop' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'ipv6-allow-multicast-probe' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'ipv6-allow-traffic-redirect' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'irq-time-accounting' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'language' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'ldapconntimeout' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'lldp-reception' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'lldp-transmission' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'log-ssl-connection' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'log-uuid-address' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'login-timestamp' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'long-vdom-name' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'management-port' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'management-port-use-admin-sport' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'management-vdom' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'max-route-cache-size' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'memory-use-threshold-extreme' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'memory-use-threshold-green' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'memory-use-threshold-red' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'miglog-affinity' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'miglogd-children' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'multi-factor-authentication' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'pmtu-discovery' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'policy-auth-concurrent' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'post-login-banner' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'pre-login-banner' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'private-data-encryption' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'proxy-auth-lifetime' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'proxy-auth-lifetime-timeout' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'proxy-auth-timeout' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'proxy-cert-use-mgmt-vdom' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'proxy-hardware-acceleration' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'proxy-re-authentication-mode' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'proxy-resource-mode' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'proxy-worker-count' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'radius-port' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'reboot-upon-config-restore' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'refresh' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'remoteauthtimeout' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'reset-sessionless-tcp' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'restart-time' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'revision-backup-on-logout' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'revision-image-auto-backup' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'scanunit-count' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'security-rating-result-submission' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'security-rating-run-on-schedule' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'send-pmtu-icmp' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'snat-route-change' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'special-file-23-support' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'speedtest-server' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'ssd-trim-hour' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'ssd-trim-min' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'ssh-enc-algo' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'ssh-kex-algo' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'ssh-mac-algo' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'ssl-min-proto-version' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'ssl-static-key-ciphers' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'sslvpn-cipher-hardware-acceleration' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'sslvpn-ems-sn-check' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'sslvpn-kxp-hardware-acceleration' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'sslvpn-max-worker-count' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'sslvpn-plugin-version-check' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'strict-dirty-session-check' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'strong-crypto' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'switch-controller' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'switch-controller-reserved-network' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'sys-perf-log-interval' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'tcp-halfclose-timer' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'tcp-halfopen-timer' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'tcp-option' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'tcp-rst-timer' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'tcp-timewait-timer' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'tftp' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'timezone' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'traffic-priority' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'traffic-priority-level' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'two-factor-email-expiry' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'two-factor-fac-expiry' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'two-factor-ftk-expiry' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'two-factor-ftm-expiry' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'two-factor-sms-expiry' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'udp-idle-timer' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'url-filter-affinity' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'url-filter-count' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'user-device-store-max-devices' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'user-device-store-max-unified-mem' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'user-device-store-max-users' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'user-server-cert' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'vdom-admin' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'vdom-mode' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'vip-arp-range' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'virtual-server-count' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'virtual-switch-vlan' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'wad-affinity' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'wad-csvc-cs-count' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'wad-csvc-db-count' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'wad-memory-change-granularity' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'wad-source-affinity' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'wad-worker-count' (type=int) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'wifi-ca-certificate' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'wifi-certificate' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'wimax-4g-usb' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'wireless-controller' (type=string) [httpsd 6969 - 1683041287 info] api_store_parameter[320] -- add API parameter 'wireless-controller-port' (type=int) [httpsd 6969 - 1683041287 info] api_cmdb_request_init_by_path[1651] -- new CMDB query (path='system',name='global') [httpsd 6969 - 1683041287 info] handle_cli_req_v2[3094] -- new CMDB API request (vdom='root',user='terraform_api_admin') [httpsd 6969 - 1683041287 info] _api_cmdb_v2_config[1322] -- editing CLI object (append=0, auto_key=0, path=system, name=global, mkey=(null), flags=0) [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'language' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'gui-ipv6' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'gui-replacement-message-groups' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'gui-local-out' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'gui-certificates' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'gui-custom-language' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'gui-wireless-opensecurity' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'gui-display-hostname' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'gui-fortigate-cloud-sandbox' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'gui-firmware-upgrade-warning' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'gui-allow-default-hostname' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'gui-forticare-registration-setup-warning' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'gui-cdn-usage' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-https-ssl-versions' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-https-ssl-versions' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-https-ssl-ciphersuites' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-https-ssl-ciphersuites' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-https-ssl-ciphersuites' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admintimeout' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-concurrent' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-lockout-threshold' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-lockout-duration' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'refresh' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'interval' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'failtime' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'daily-restart' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'restart-time' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'radius-port' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-login-max' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'remoteauthtimeout' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ldapconntimeout' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'batch-cmdb' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'multi-factor-authentication' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ssl-min-proto-version' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'autorun-log-fsck' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'dst' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'timezone' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'traffic-priority' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'traffic-priority-level' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'anti-replay' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'send-pmtu-icmp' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'honor-df' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'pmtu-discovery' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'virtual-switch-vlan' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'revision-image-auto-backup' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'revision-backup-on-logout' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'management-vdom' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'hostname' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'alias' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'strong-crypto' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ssl-static-key-ciphers' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ssh-kex-algo' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ssh-kex-algo' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ssh-kex-algo' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ssh-kex-algo' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ssh-kex-algo' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ssh-enc-algo' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ssh-enc-algo' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ssh-enc-algo' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ssh-mac-algo' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ssh-mac-algo' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ssh-mac-algo' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ssh-mac-algo' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'snat-route-change' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'speedtest-server' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'cli-audit-log' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'dh-params' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'fds-statistics' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'fds-statistics-period' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'tcp-option' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'lldp-transmission' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'lldp-reception' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'proxy-auth-timeout' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'proxy-re-authentication-mode' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'proxy-auth-lifetime' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'proxy-auth-lifetime-timeout' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'proxy-resource-mode' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'proxy-cert-use-mgmt-vdom' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'sys-perf-log-interval' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'check-protocol-header' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'vip-arp-range' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'reset-sessionless-tcp' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'allow-traffic-redirect' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ipv6-allow-traffic-redirect' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'strict-dirty-session-check' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'tcp-halfclose-timer' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'tcp-halfopen-timer' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'tcp-timewait-timer' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'tcp-rst-timer' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'udp-idle-timer' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'block-session-timer' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ip-src-port-range' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'pre-login-banner' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'post-login-banner' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'tftp' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'av-failopen' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'av-failopen-session' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'memory-use-threshold-extreme' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'memory-use-threshold-red' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'memory-use-threshold-green' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'cpu-use-threshold' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'check-reset-range' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'vdom-mode' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'vdom-mode' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'vdom-admin' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'long-vdom-name' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'edit-vdom-prompt' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-port' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-sport' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-https-redirect' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-hsts-max-age' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-ssh-password' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-restrict-local' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-ssh-port' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-ssh-grace-time' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-ssh-v1' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-telnet' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-telnet-port' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-forticloud-sso-login' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'default-service-source-port' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-maintainer' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-server-cert' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'user-server-cert' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-https-pki-required' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'wifi-certificate' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'wifi-ca-certificate' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'auth-http-port' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'auth-https-port' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'auth-keepalive' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'policy-auth-concurrent' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'auth-session-limit' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'auth-cert' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'clt-cert-req' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'fortiservice-port' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'cfg-save' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'cfg-revert-timeout' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'reboot-upon-config-restore' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'admin-scp' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'security-rating-result-submission' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'security-rating-run-on-schedule' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'wireless-controller' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'wireless-controller-port' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'fortiextender-data-port' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'fortiextender' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'extender-controller-reserved-network' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'fortiextender-discovery-lockdown' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'fortiextender-vlan-mode' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'switch-controller' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'switch-controller-reserved-network' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'dnsproxy-worker-count' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'url-filter-count' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'proxy-worker-count' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'scanunit-count' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'proxy-hardware-acceleration' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ipsec-hmac-offload' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ipv6-accept-dad' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ipv6-allow-anycast-probe' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ipv6-allow-multicast-probe' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ipv6-allow-local-in-slient-drop' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'csr-ca-attribute' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'wimax-4g-usb' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'cert-chain-max' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'sslvpn-max-worker-count' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'sslvpn-kxp-hardware-acceleration' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'sslvpn-cipher-hardware-acceleration' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'sslvpn-ems-sn-check' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'sslvpn-plugin-version-check' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'two-factor-ftk-expiry' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'two-factor-email-expiry' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'two-factor-sms-expiry' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'two-factor-fac-expiry' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'two-factor-ftm-expiry' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'wad-worker-count' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'wad-csvc-cs-count' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'wad-csvc-db-count' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'wad-source-affinity' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'wad-memory-change-granularity' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'login-timestamp' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'miglogd-children' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'special-file-23-support' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'log-uuid-address' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'log-ssl-connection' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'gui-rest-api-cache' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'gui-fortiguard-resource-fetch' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'arp-max-entry' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ha-affinity' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'cmdbsvr-affinity' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'av-affinity' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'wad-affinity' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'miglog-affinity' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'url-filter-affinity' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'br-fdb-max-entry' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'max-route-cache-size' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ipsec-asic-offload' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ipsec-soft-dec-async' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'device-idle-timeout' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'user-device-store-max-devices' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'user-device-store-max-users' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'user-device-store-max-unified-mem' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'private-data-encryption' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'auto-auth-extension-device' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'gui-theme' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'gui-date-format' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'gui-date-time-source' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'igmp-state-limit' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'cloud-communication' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'ipsec-ha-seqjump-rate' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'fortitoken-cloud' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'faz-disk-buffer-size' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'irq-time-accounting' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'management-port' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'management-port-use-admin-sport' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'internet-service-database' [httpsd 6969 - 1683041287 info] api_set_cmdb_attr[1925] -- 'early-tcp-npu-session' 0: config system global -14: set vdom-mode multi-vdom cmd=config system global abort

[httpsd 6969 - 1683041287 info] cmdb_save_with_children[279] -- appended main node (nret=-14, is_new=0) [httpsd 6969 - 1683041287 error] cmdb_save_with_children[284] -- saving failed for main node: 'global' (err=-14)

[httpsd 6969 - 1683041287 error] cmdb_commit_from_json[1694] -- error saving request object to CLI (-14) [httpsd 6969 - 1683041287 error] _api_cmdb_v2_config[1358] -- error editing object (nret=-14) [httpsd 6969 - 1683041287 warning] api_return_http_result[1272] -- API error -14 raised [httpsd 6969 - 1683041287 info] handle_cli_req_v2[3124] -- returning to original vdom "root" [httpsd 6969 - 1683041287 info] fweb_debug_final[306] -- Completed PUT request for "/api/v2/cmdb/system/global" (HTTP 500)

And it failed !

Our configuration : 

resource "fortios_system_global" "global" {
  admin_sport           = 443
  timezone              = "28"
  remoteauthtimeout     = "60"
  admin_telnet          = "disable"
  admin_ssh_v1          = "disable"
  admintimeout          = "30"
  vdom_admin            = "enable"
  vdom_mode             = "multi vdom"
}

Regards, Sebastien

minikenshin commented 1 year ago

I find the issue (not me directly, thanks to the fortinet discord). You need to put super_admin profile on your api user (in cli only).

config system api-user
edit "YOURUSERAPINAME"
set accprofile super_admin
next
MaxxLiu22 commented 1 year ago

@sergey-ostrovskiy ,

Is this problem solved? I just tried, everything works as expected.

Thanks, Maxx