topic Re: Weird message when logging in in Firewall and Security Management

Weird message when logging in

Franktum — Fri, 19 Apr 2024 07:58:19 GMT

Hi all:

Yesterday we upgraded an 5400 appliance to R81.10 Take 130. Since then, when you log in this message shows up:

End of banner message from server
admin@192.168.x.x's password:
Last login: Fri Apr 19 08:49:52 2024 from 192.168.x.x
if: Expression Syntax.
then: Command not found.
[admin@gw01 ~]#

We are still checking the logs files of the system but nothing found yet. It seems the interpreter line from a script is incorrect but, which one?

Any idea?

Thanks in advanced

Regards

Re: Weird message when logging in

Lesley — Fri, 19 Apr 2024 08:20:41 GMT

Can you try to change the banner message? Maybe there is a weird character in it or something? Maybe go back to something default like: This system is for authorized use only.

You can change the banner in the webGUI -> System Management -> Messages -> Banner Message

Or via CLI

Re: Weird message when logging in

Franktum — Fri, 19 Apr 2024 08:59:39 GMT

Hi Lesley,

Thanks for your answer. I changed the banner message but the message is still there:

Using username "admin".
Pre-authentication banner message from server:
| This system is for authorized use only
End of banner message from server
admin@192.168.x.x's password:
Last login: Fri Apr 19 09:36:48 2024 from 192.168.x.x
if: Expression Syntax.
then: Command not found.
[admin@gw01 ~]#

Regards

Re: Weird message when logging in

G_W_Albrecht — Fri, 19 Apr 2024 09:39:07 GMT

I would suggest to do a fresh install of the GW, looks like some file corruption to me.

Re: Weird message when logging in

Lesley — Fri, 19 Apr 2024 11:09:03 GMT

Have you done a reboot? And tested with different SSH user?

I am afraid what Albrecht also states that probably a reinstall is needed. You can try with TAC for them to check.

I cannot find any open bugs or relevant SK's.

Re: Weird message when logging in

Franktum — Fri, 19 Apr 2024 12:36:16 GMT

Hi,

We fixed it by changing the admin shell from /bin/csh to /bin/bash.

Thank you for your answers!

Regards

Re: Weird message when logging in

the_rock — Fri, 19 Apr 2024 12:50:00 GMT

That was first thing that came to my mind when I read your post. You can always change it to /etc/cli.sh if you dont want to go to expert mode when logging in

example -> chsh -s /etc/cli.sh admin

Best,

Andy

Re: Weird message when logging in

G_W_Albrecht — Mon, 22 Apr 2024 07:23:28 GMT

Strange ! That has changed during upgrade? Or just no banner issue before upgrade?

Re: Weird message when logging in

Franktum — Mon, 22 Apr 2024 07:49:03 GMT

The banner was configured before the upgrade yes. Don't know why this message showed up after it.

Re: Weird message when logging in

G_W_Albrecht — Mon, 22 Apr 2024 07:51:34 GMT

And you did not start admin session in expert mode previously? Mostly done for WinSCP connect...

Re: Weird message when logging in

Franktum — Mon, 22 Apr 2024 08:15:31 GMT

Yes, I did several days before the upgrade in order to transfer the 81.10 images (81.10 base and JHF).