taers232c / GAMADV-XTD3

Command line tool to manage Google Workspace
714 stars 87 forks source link

GAMADV-XTD3 Installation Issue #260

Closed perickson920 closed 2 years ago

perickson920 commented 2 years ago

I have followed the instructions at https://github.com/taers232c/GAMADV-XTD3/wiki/How-to-Upgrade-from-Standard-GAM#windows

All seems to go well until the end where I need to Verify GAMADV-XTD3 service account access.

All 26 scopes show Fail even hours after finishing the installation. I have tried it 2 different times on 2 computers with the same result.

C:\GAMADV-XTD3>gam user user@domain.com check serviceaccount System time status Your system time differs from admin.googleapis.com by 5 seconds PASS Service Account Private Key Authentication Authentication PASS Service Account Private Key age; Google recommends rotating keys on a routine basis Service Account Private Key age: 424 days WARN Domain-Wide Delegation authentication:, User: user@domain.com, Scopes: 26 https://mail.google.com/ FAIL (1/26) https://sites.google.com/feeds FAIL (2/26) https://www.google.com/m8/feeds FAIL (3/26) https://www.googleapis.com/auth/apps.alerts FAIL (4/26) https://www.googleapis.com/auth/calendar FAIL (5/26) https://www.googleapis.com/auth/classroom.announcements FAIL (6/26) https://www.googleapis.com/auth/classroom.coursework.students FAIL (7/26) https://www.googleapis.com/auth/classroom.courseworkmaterials FAIL (8/26) https://www.googleapis.com/auth/classroom.profile.emails FAIL (9/26) https://www.googleapis.com/auth/classroom.rosters FAIL (10/26) https://www.googleapis.com/auth/classroom.topics FAIL (11/26) https://www.googleapis.com/auth/cloud-identity FAIL (12/26) https://www.googleapis.com/auth/cloud-platform FAIL (13/26) https://www.googleapis.com/auth/contacts FAIL (14/26) https://www.googleapis.com/auth/contacts.other.readonly FAIL (15/26) https://www.googleapis.com/auth/datastudio FAIL (16/26) https://www.googleapis.com/auth/directory.readonly FAIL (17/26) https://www.googleapis.com/auth/documents FAIL (18/26) https://www.googleapis.com/auth/drive FAIL (19/26) https://www.googleapis.com/auth/drive.activity FAIL (20/26) https://www.googleapis.com/auth/gmail.modify FAIL (21/26) https://www.googleapis.com/auth/gmail.settings.basic FAIL (22/26) https://www.googleapis.com/auth/gmail.settings.sharing FAIL (23/26) https://www.googleapis.com/auth/keep FAIL (24/26) https://www.googleapis.com/auth/spreadsheets FAIL (25/26) https://www.googleapis.com/auth/userinfo.profile FAIL (26/26) Some scopes FAILED!

taers232c commented 2 years ago

Are you substituting a valid domain email address for @. @.>?

Send me a Meet/Zoom invitation.

Ross

@.***

On Apr 6, 2022, at 7:50 AM, perickson920 @.***> wrote:

I have followed the instructions at https://github.com/taers232c/GAMADV-XTD3/wiki/How-to-Upgrade-from-Standard-GAM#windows https://github.com/taers232c/GAMADV-XTD3/wiki/How-to-Upgrade-from-Standard-GAM#windows All seems to go well until the end where I need to Verify GAMADV-XTD3 service account access.

All 26 scopes show Fail even hours after finishing the installation. I have tried it 2 different times on 2 computers with the same result.

C:\GAMADV-XTD3>gam user @. @.> check serviceaccount System time status Your system time differs from admin.googleapis.com by 5 seconds PASS Service Account Private Key Authentication Authentication PASS Service Account Private Key age; Google recommends rotating keys on a routine basis Service Account Private Key age: 424 days WARN Domain-Wide Delegation authentication:, User: @. @.>, Scopes: 26 https://mail.google.com/ https://mail.google.com/ FAIL (1/26) https://sites.google.com/feeds https://sites.google.com/feeds FAIL (2/26) https://www.google.com/m8/feeds https://www.google.com/m8/feeds FAIL (3/26) https://www.googleapis.com/auth/apps.alerts https://www.googleapis.com/auth/apps.alerts FAIL (4/26) https://www.googleapis.com/auth/calendar https://www.googleapis.com/auth/calendar FAIL (5/26) https://www.googleapis.com/auth/classroom.announcements https://www.googleapis.com/auth/classroom.announcements FAIL (6/26) https://www.googleapis.com/auth/classroom.coursework.students https://www.googleapis.com/auth/classroom.coursework.students FAIL (7/26) https://www.googleapis.com/auth/classroom.courseworkmaterials https://www.googleapis.com/auth/classroom.courseworkmaterials FAIL (8/26) https://www.googleapis.com/auth/classroom.profile.emails https://www.googleapis.com/auth/classroom.profile.emails FAIL (9/26) https://www.googleapis.com/auth/classroom.rosters https://www.googleapis.com/auth/classroom.rosters FAIL (10/26) https://www.googleapis.com/auth/classroom.topics https://www.googleapis.com/auth/classroom.topics FAIL (11/26) https://www.googleapis.com/auth/cloud-identity https://www.googleapis.com/auth/cloud-identity FAIL (12/26) https://www.googleapis.com/auth/cloud-platform https://www.googleapis.com/auth/cloud-platform FAIL (13/26) https://www.googleapis.com/auth/contacts https://www.googleapis.com/auth/contacts FAIL (14/26) https://www.googleapis.com/auth/contacts.other.readonly https://www.googleapis.com/auth/contacts.other.readonly FAIL (15/26) https://www.googleapis.com/auth/datastudio https://www.googleapis.com/auth/datastudio FAIL (16/26) https://www.googleapis.com/auth/directory.readonly https://www.googleapis.com/auth/directory.readonly FAIL (17/26) https://www.googleapis.com/auth/documents https://www.googleapis.com/auth/documents FAIL (18/26) https://www.googleapis.com/auth/drive https://www.googleapis.com/auth/drive FAIL (19/26) https://www.googleapis.com/auth/drive.activity https://www.googleapis.com/auth/drive.activity FAIL (20/26) https://www.googleapis.com/auth/gmail.modify https://www.googleapis.com/auth/gmail.modify FAIL (21/26) https://www.googleapis.com/auth/gmail.settings.basic https://www.googleapis.com/auth/gmail.settings.basic FAIL (22/26) https://www.googleapis.com/auth/gmail.settings.sharing https://www.googleapis.com/auth/gmail.settings.sharing FAIL (23/26) https://www.googleapis.com/auth/keep https://www.googleapis.com/auth/keep FAIL (24/26) https://www.googleapis.com/auth/spreadsheets https://www.googleapis.com/auth/spreadsheets FAIL (25/26) https://www.googleapis.com/auth/userinfo.profile https://www.googleapis.com/auth/userinfo.profile FAIL (26/26) Some scopes FAILED!

— Reply to this email directly, view it on GitHub https://github.com/taers232c/GAMADV-XTD3/issues/260, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACCTYLYGTRK2ZQAV77XB7XDVDWQD3ANCNFSM5SWJMSJQ. You are receiving this because you are subscribed to this thread.

perickson920 commented 2 years ago

Yes, I am entering my Super User @.*** address.

Invitation:

meet.google.com/mqn-xcwp-sad


Paul Erickson | IT Dept

Direct: 920-425-9802

Cell: 920-362-4880

Green Bay, WI

www.jonessign.com

Facebook https://www.facebook.com/JonesSignCompany | I https://www.instagram.com/jonessignco1910_/nstagram https://www.instagram.com/jonessignco1910_/ | LinkedIn https://www.linkedin.com/company/jones-sign-co--inc-/ | Twitter https://twitter.com/jonessign

On Wed, Apr 6, 2022 at 9:55 AM Ross Scroggs @.***> wrote:

Are you substituting a valid domain email address for @. @.>?

Send me a Meet/Zoom invitation.

Ross

@.***

On Apr 6, 2022, at 7:50 AM, perickson920 @.***> wrote:

I have followed the instructions at

https://github.com/taers232c/GAMADV-XTD3/wiki/How-to-Upgrade-from-Standard-GAM#windows < https://github.com/taers232c/GAMADV-XTD3/wiki/How-to-Upgrade-from-Standard-GAM#windows

All seems to go well until the end where I need to Verify GAMADV-XTD3 service account access.

All 26 scopes show Fail even hours after finishing the installation. I have tried it 2 different times on 2 computers with the same result.

C:\GAMADV-XTD3>gam user @. @.> check serviceaccount System time status Your system time differs from admin.googleapis.com by 5 seconds PASS Service Account Private Key Authentication Authentication PASS Service Account Private Key age; Google recommends rotating keys on a routine basis Service Account Private Key age: 424 days WARN Domain-Wide Delegation authentication:, User: @. @.>, Scopes: 26 https://mail.google.com/ https://mail.google.com/ FAIL (1/26) https://sites.google.com/feeds https://sites.google.com/feeds FAIL (2/26) https://www.google.com/m8/feeds https://www.google.com/m8/feeds FAIL (3/26) https://www.googleapis.com/auth/apps.alerts < https://www.googleapis.com/auth/apps.alerts> FAIL (4/26) https://www.googleapis.com/auth/calendar < https://www.googleapis.com/auth/calendar> FAIL (5/26) https://www.googleapis.com/auth/classroom.announcements < https://www.googleapis.com/auth/classroom.announcements> FAIL (6/26) https://www.googleapis.com/auth/classroom.coursework.students < https://www.googleapis.com/auth/classroom.coursework.students> FAIL (7/26) https://www.googleapis.com/auth/classroom.courseworkmaterials < https://www.googleapis.com/auth/classroom.courseworkmaterials> FAIL (8/26) https://www.googleapis.com/auth/classroom.profile.emails < https://www.googleapis.com/auth/classroom.profile.emails> FAIL (9/26) https://www.googleapis.com/auth/classroom.rosters < https://www.googleapis.com/auth/classroom.rosters> FAIL (10/26) https://www.googleapis.com/auth/classroom.topics < https://www.googleapis.com/auth/classroom.topics> FAIL (11/26) https://www.googleapis.com/auth/cloud-identity < https://www.googleapis.com/auth/cloud-identity> FAIL (12/26) https://www.googleapis.com/auth/cloud-platform < https://www.googleapis.com/auth/cloud-platform> FAIL (13/26) https://www.googleapis.com/auth/contacts < https://www.googleapis.com/auth/contacts> FAIL (14/26) https://www.googleapis.com/auth/contacts.other.readonly < https://www.googleapis.com/auth/contacts.other.readonly> FAIL (15/26) https://www.googleapis.com/auth/datastudio < https://www.googleapis.com/auth/datastudio> FAIL (16/26) https://www.googleapis.com/auth/directory.readonly < https://www.googleapis.com/auth/directory.readonly> FAIL (17/26) https://www.googleapis.com/auth/documents < https://www.googleapis.com/auth/documents> FAIL (18/26) https://www.googleapis.com/auth/drive < https://www.googleapis.com/auth/drive> FAIL (19/26) https://www.googleapis.com/auth/drive.activity < https://www.googleapis.com/auth/drive.activity> FAIL (20/26) https://www.googleapis.com/auth/gmail.modify < https://www.googleapis.com/auth/gmail.modify> FAIL (21/26) https://www.googleapis.com/auth/gmail.settings.basic < https://www.googleapis.com/auth/gmail.settings.basic> FAIL (22/26) https://www.googleapis.com/auth/gmail.settings.sharing < https://www.googleapis.com/auth/gmail.settings.sharing> FAIL (23/26) https://www.googleapis.com/auth/keep < https://www.googleapis.com/auth/keep> FAIL (24/26) https://www.googleapis.com/auth/spreadsheets < https://www.googleapis.com/auth/spreadsheets> FAIL (25/26) https://www.googleapis.com/auth/userinfo.profile < https://www.googleapis.com/auth/userinfo.profile> FAIL (26/26) Some scopes FAILED!

— Reply to this email directly, view it on GitHub < https://github.com/taers232c/GAMADV-XTD3/issues/260>, or unsubscribe < https://github.com/notifications/unsubscribe-auth/ACCTYLYGTRK2ZQAV77XB7XDVDWQD3ANCNFSM5SWJMSJQ . You are receiving this because you are subscribed to this thread.

— Reply to this email directly, view it on GitHub https://github.com/taers232c/GAMADV-XTD3/issues/260#issuecomment-1090367065, or unsubscribe https://github.com/notifications/unsubscribe-auth/AYSZ35L44ECSDH7EGKNQMF3VDWQU5ANCNFSM5SWJMSJQ . You are receiving this because you authored the thread.Message ID: @.***>