topic Re: objects are locked but there no sessions can be takeover or published in Firewall and Security Management

objects are locked but there no sessions can be takeover or published

Marco_Huang1 — Thu, 21 Sep 2017 03:16:31 GMT

Management server running on R80.10. I've got some objects locked by admin, but checked Session table there are no active sessions holding them.

I was using API to modifying the objects, few times the publish process was hung and "lost connection to API server". I then reboot the server. I guess this probably the cause... Does anyone have an idea how to unlock those objects? Thanks

Screenshot attached.

Re: objects are locked but there no sessions can be takeover or published

Neil_ZInk — Thu, 21 Sep 2017 15:56:13 GMT

I came across the same issue. I had to reboot the management server to fix my issue.

Re: objects are locked but there no sessions can be takeover or published

Ran_Kopelman — Wed, 27 Sep 2017 13:32:32 GMT

Hi Marco

I'm Ran and I'm a manger in the R&D of Check Point, responsible for I/S in the Management Server.

First, thanks for raising this issue.

I would like to contact you in person in order to analyse this issue properly.

Dameon can you please assist

https://community.checkpoint.com/people/dwelccfe6e688-522c-305c-adaa-194bd7a7becc‌

Thanks

Ran

Re: objects are locked but there no sessions can be takeover or published

PhoneBoy — Wed, 27 Sep 2017 16:06:11 GMT

I will send you Marco's details offline.

Re: objects are locked but there no sessions can be takeover or published

Marco_Huang1 — Thu, 28 Sep 2017 20:34:53 GMT

Thanks Ran and Dameon! I will wait for your followup.

Re: objects are locked but there no sessions can be takeover or published

Joshua_Boerum — Tue, 17 Oct 2017 17:25:00 GMT

What was the solution for this issue? I am having a similar issue where a group on two domains are locked and there are no sessions for the user locking the object.

Re: objects are locked but there no sessions can be takeover or published

PhoneBoy — Wed, 18 Oct 2017 01:45:25 GMT

I sent your contact info privately to https://community.checkpoint.com/people/ranko795bc55d-ed02-437c-a4f3-88d212bddb02‌

I recommend opening a TAC case on this also.

I'll see if there's a general solution we can share.

Re: objects are locked but there no sessions can be takeover or published

Hugo_vd_Kooij — Fri, 20 Oct 2017 08:04:19 GMT

There is a TAC case open. I need to look into the issue next week as I have no access to the system this week.

Re: objects are locked but there no sessions can be takeover or published

Natan_Chamilevs — Sun, 22 Oct 2017 11:01:40 GMT

Hi Joshua, my name is Natan and I'm a software developer in Ran's crew.

In order to investigate and solve this issue, I'd like to talk to you.

Dameon Welch Abernathy , could you please help by sending me Joshua's contact info?

Thank you,

Natan

Re: objects are locked but there no sessions can be takeover or published

PhoneBoy — Mon, 23 Oct 2017 00:51:56 GMT

It's in your inbox now

Re: objects are locked but there no sessions can be takeover or published

Hugo_vd_Kooij — Thu, 14 Dec 2017 09:46:37 GMT

Marco,

You might want to dig into the session list:

psql_client cpm postgres -c "select objid,applicationname,username from worksession where not state='PUBLISHED';"

sk113955

Re: objects are locked but there no sessions can be takeover or published

Hugo_vd_Kooij — Thu, 14 Dec 2017 09:53:00 GMT

Even more fun:

[Expert@fwmgmt:0]# psql_client cpm postgres -c "select objid,applicationname,username,numberoflocks from worksession where not state='PUBLISHED' and numberoflocks > 0;"
objid | applicationname | username | numberoflocks
--------------------------------------+---------------------------+------------+---------------
b15c8521-dfa0-4ac1-aaf0-d93c421f4807 | SmartConsole | admin-hvdk | 5
47c02486-942b-41f0-9cc3-cb68101683c7 | WEB_API | admin-hvdk | 1182
bbf33d06-de48-4c3e-bd72-43e34c7903f8 | Endpoint Security Console | admin-hvdk | 1
b90522cd-53c8-4d75-a58c-e441f77d95d4 | Endpoint Security Console | admin-hvdk | 1
6c4e69fa-92d4-44da-b377-c25390e1da01 | Endpoint Security Console | admin-hvdk | 3
5cd20dc9-6a77-4456-a733-c5bcae44e5b4 | SmartConsole | admin-hvdk | 1
(6 rows)

Then you can use the objid to discard or publish that session.

Mind you that you be careful as you do a lot of damage if you discard or publish the wrong session.

Re: objects are locked but there no sessions can be takeover or published

Robert_Decker — Wed, 30 May 2018 11:40:04 GMT

this thread may contain a solution... -

https://community.checkpoint.com/thread/7293-best-way-to-handle-locked-session-locked-but-not-available-on-session-panel

Robert.

Re: objects are locked but there no sessions can be takeover or published

Michael_Braun — Thu, 14 Jun 2018 14:13:50 GMT

Has this been fixed Dameon Welch Abernathy? I have been doing some testing with the Web API and i keep running into this issue.

Re: objects are locked but there no sessions can be takeover or published

PhoneBoy — Thu, 14 Jun 2018 14:58:12 GMT

I would recommend engaging with the TAC if you keep running into this issue so we can isolate and fix the issue.

Re: objects are locked but there no sessions can be takeover or published

burakyalcinkaya — Wed, 20 Mar 2019 16:18:40 GMT

Hi,

I have a same issue. İs there anybody help me?

Thanks