Re: [FW-1] can't connect to gui after fw dbimport - further info

[Jean-Francois Gobin <gobin@FW1-NOSPAMGOBINJF.BE>]

Hello Damo,

We had the same trouble. I determined quickly that when a user is assigned
to a group or more, dbimport crashes on FP2. Moving to FP3 solved the
trouble.

Checkpoint just confirmed us that this is a real bug.

Jean-Francois

On Thu, 10 Oct 2002, Damien Hart wrote:

> Further investigation shows that the fwm daemon is crashing with a
> segmentation fault  -- Segmentation fault   fwm "$@".  There is also a
> message earlier in the fwm debug output saying that there is an error
> opening /opt/CPshared/5.0/database//authkeys.C and a search of the entire
> disk results in no file of this name being found.  Maybe related, maybe
> not...
>
> This explains why I can't connect to it but I cannot figure out why it is
> happening.  Doing a cpstop, copying back the fwauth.NDB* files, and cpstart
> fixes the gui connection problem, but obviously does not have my new users
> imported.  Interestingly the same thing happens when I just do an export of
> the working configuration and then try and import it back in over itself.
>
> This is very confusing and frustrating so if anyone has any clue as to what
> I can do to fix it it would be most appreciated.
>
> thanks again
>
> Damo
>
>
> > Hi peoples,
> >
> > I was getting ready to switch my NG FP2 on Secureplatform into production
> > but am having some problems with RADIUS authentication.  So in lieu of
> that
> > working reliably I would like to transfer my original internal firewall
> > users across from a fw-1 ver 4.0 box.  I ran fw dbexport on the ver 4.0
> box
> > and brought the file across to the NG machine.  After some tweaking and
> > creation of groups etc I managed to successfully run fw dbimport -f
> filename
> > without error, but then when I tried to connect to the GUI it refused -
> > "connection cannot be initated".
> >
> > Can someone please tell me what I am missing to get this to work?
> >
> > P.S. Has anyone else had problems with the ahclientd hanging sometimes
> > during a logon to port 900?  Killing the last of the three ahclientd
> > processes fixes it and it is very intermittant but a little disturbing...
> >
> > regards
> >
> > Damo
> >
> > =================================================
> > To set vacation, Out Of Office, or away messages,
> > send an email to LISTSERV@lists.us.checkpoint.com
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > fw-1-owner@ts.checkpoint.com
> > =================================================
> >
> >
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================
>

--
Jean-Francois Gobin - Administrateur gobinjf.be
http://www.gobinjf.be   mailto:gobin@gobinjf.be

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================