Re: [FW-1] can't connect to gui after fw dbimport - further info

[Damien Hart <damien.hart@FW1-NOSPAMCANBERRATIMES.COM.AU>]

Further investigation shows that the fwm daemon is crashing with a
segmentation fault  -- Segmentation fault   fwm "$@".  There is also a
message earlier in the fwm debug output saying that there is an error
opening /opt/CPshared/5.0/database//authkeys.C and a search of the entire
disk results in no file of this name being found.  Maybe related, maybe
not...

This explains why I can't connect to it but I cannot figure out why it is
happening.  Doing a cpstop, copying back the fwauth.NDB* files, and cpstart
fixes the gui connection problem, but obviously does not have my new users
imported.  Interestingly the same thing happens when I just do an export of
the working configuration and then try and import it back in over itself.

This is very confusing and frustrating so if anyone has any clue as to what
I can do to fix it it would be most appreciated.

thanks again

Damo


> Hi peoples,
>
> I was getting ready to switch my NG FP2 on Secureplatform into production
> but am having some problems with RADIUS authentication.  So in lieu of
that
> working reliably I would like to transfer my original internal firewall
> users across from a fw-1 ver 4.0 box.  I ran fw dbexport on the ver 4.0
box
> and brought the file across to the NG machine.  After some tweaking and
> creation of groups etc I managed to successfully run fw dbimport -f
filename
> without error, but then when I tried to connect to the GUI it refused -
> "connection cannot be initated".
>
> Can someone please tell me what I am missing to get this to work?
>
> P.S. Has anyone else had problems with the ahclientd hanging sometimes
> during a logon to port 900?  Killing the last of the three ahclientd
> processes fixes it and it is very intermittant but a little disturbing...
>
> regards
>
> Damo
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================
>
>

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================