topic Re: Unable to login to Smartconsole in Firewall and Security Management

Unable to login to Smartconsole

medtiti92 — Mon, 11 Dec 2023 08:49:17 GMT

Hi,

After the disk was full in SmartConsole, we delete some files to make free espaces, but sinces, we are unable to login to the management via Smart Console :

when i make api status, i have this ouput :

[Management]# api status
2023-Dec-11 11:48:20 - ERROR: Log directory not found at ${NGM_WEB_API_LOG_DIR}.
Exiting...
Could not write to api_sh.elg: [Errno 2] No such file or directory: '/opt/CPsuite-R81.10/fw1/log/api_sh.elg'

Please help

Re: Unable to login to Smartconsole

Amir_Senn — Mon, 11 Dec 2023 16:15:09 GMT

Same output for "api start"?

Which partition was full? Other partitions still have unused space?

Usually the partition that gets filled up is /var/log/ but it should have a maintenance mechanism to preserve free space, so it's worth while to check.

Please add version+JHF information as well as df -kh output.

Re: Unable to login to Smartconsole

medtiti92 — Mon, 11 Dec 2023 16:23:05 GMT

Hi Amir,

Thanks for your reply. Yes it is same output "api start", the /var/log was very full, after deleting some folders and files, the size decrease but i am unable to login to the smartconsole

[Management]# df -kh
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/vg_splat-lv_current 32G 26G 6.9G 79% /
/dev/sda1 291M 43M 233M 16% /boot
tmpfs 7.8G 28K 7.8G 1% /dev/shm
/dev/mapper/vg_splat-lv_log 100G 52G 49G 52% /var/log
cgroup 7.8G 0 7.8G 0% /sys/fs/cgroup

Re: Unable to login to Smartconsole

the_rock — Mon, 11 Dec 2023 20:41:02 GMT

Sounds like you deleted some sort of database files, which would 100% cause this sort of issue. I reclal few years ago this exact thing happened with a customer and once we restored a backup, all worked, we just had to reinstall the jumbo hotfix.

Do you happen to have working backup from the appliance?

Andy

Re: Unable to login to Smartconsole

the_rock — Mon, 11 Dec 2023 20:41:54 GMT

Just to confirm, I assume you tried cpstop; cpstart and reboot?

Andy

Re: Unable to login to Smartconsole

Tal_Paz-Fridman — Mon, 11 Dec 2023 21:04:46 GMT

Does $FWDIR/log exist? The error suggests this directory is missing.

As the_rock suggested does reboot help?

Re: Unable to login to Smartconsole

the_rock — Mon, 11 Dec 2023 22:20:35 GMT

Thats an excellent point @Tal_Paz-Fridman . After examining the api status output, it would appear to be the case.

Andy

Re: Unable to login to Smartconsole

the_rock — Mon, 11 Dec 2023 23:24:01 GMT

Here is another suggestion...IF indeed $FWDIR/log dir is missing, and you dont have a workinmg backup (i hope you do though), one thing to try might be copy the content from working mgmt with the same version to $FWDIR/log. It might be a bit risky doing that, but at this point, things dont look great, but lets be positive.

Andy

Re: Unable to login to Smartconsole

medtiti92 — Tue, 12 Dec 2023 07:47:22 GMT

hello guys,

i did cpstop cpstart, i made reboot, nothiing changed. I don't have backup, but i think that i have another management but it isn't same version(current version : R81.10, other version : R80.30)

Re: Unable to login to Smartconsole

Tal_Paz-Fridman — Tue, 12 Dec 2023 08:55:15 GMT

Did you check the existence of files in $FWDIR/log ?

If the workarounds we suggested do not work you will need to contact TAC.

Re: Unable to login to Smartconsole

medtiti92 — Tue, 12 Dec 2023 09:07:50 GMT

it exist, but no files log insides $FWDIR/log ... see below :

Re: Unable to login to Smartconsole

Tal_Paz-Fridman — Tue, 12 Dec 2023 09:35:08 GMT

That's the $FGDIR/log folder (for QoS)

The one you need to look at is with fw1 --> /opt/CPsuite-R81.10/fw1 ... if that is also missing it can explain a lot of the problems you are having.

Re: Unable to login to Smartconsole

the_rock — Tue, 12 Dec 2023 11:52:48 GMT

As Tal said, not the same folder. I would honestly work with TAC on this, because if reboot does not help and error is still the same for api status, it needs further investigation. My gut feeling tells me you most inadvertently deleted the database file from root dir...

Andy

Re: Unable to login to Smartconsole

medtiti92 — Tue, 12 Dec 2023 12:18:25 GMT

Sorry, please see below the content of /opt/CPsuite-R81.10/fw1 :

[Management]# cd /opt/CPsuite-R81.10/fw1/
[Management]# ls
ICS cyrus_sasl_install sclient
Python database scripts
SU default_cpm_db spool
Solr dlp sql_scripts
Solr7 doc sql_scripts_R80_20
amw fast_policy srpkg
amw_kss hash state
api ips sup
appi lib te
aspam_engine_install lib64 teCurrentPack
av log teDefaultPack
bin modules temp
boot nac tmp
c-icap nacportal tmpCKP_mutex::SIC_DB
cipher_util ngm tmpcpm.lock
cisco ngm_upgrade uf
conf oracle_oi webconsole
cpdiag orig well
cpextensions parsers wylis_tmp
cpm-server policy
cpm_client_stats postfix_install

Re: Unable to login to Smartconsole

_Val_ — Tue, 12 Dec 2023 12:22:56 GMT

Do you have any backup to restore your management from?

Re: Unable to login to Smartconsole

the_rock — Tue, 12 Dec 2023 12:41:20 GMT

This is my working R81.20 lab mgmt...you are definitely missing some stuff.

Andy

[Expert@CP-management:0]# cd $FWDIR
[Expert@CP-management:0]# pwd
/opt/CPsuite-R81.20/fw1
[Expert@CP-management:0]# ls
ICS api c-icap cpm_client_stats hash nacportal postfix_install state tmpcpm.lock
Python appi cipher_util cyrus_sasl_install ips ndr sclient sup uf
REVERT_BACKUP_TMP aspam_engine_install cisco database lib ngm scripts te webconsole
SU av conf default_cpm_db lib64 oracle_oi spool teCurrentPack well
Solr7 bin cpdiag dlp log orig sql_scripts teDefaultPack wylis_tmp
amw bkp-jars cpextensions doc modules parsers sql_scripts_R80_20 tmp zp.js
amw_kss boot cpm-server fast_policy nac policy srpkg tmpCKP_mutex::SIC_DB

Re: Unable to login to Smartconsole

medtiti92 — Tue, 12 Dec 2023 13:03:01 GMT

No unfortunately i don't have any backup.

Re: Unable to login to Smartconsole

medtiti92 — Tue, 12 Dec 2023 13:03:59 GMT

Yeah i see well, i don't know what doing, i will chearch someone who has same version and copy his content

Re: Unable to login to Smartconsole

the_rock — Tue, 12 Dec 2023 13:05:18 GMT

I hate to say this, but without the backup, chances this can be fixed are not that great. We had literally same issue few years ago and case even went to escalation team and luckily, we found a working backup that helped us solve the issue once it was restored.

Without it, I really dont know how it can be solved easily...

Andy

Re: Unable to login to Smartconsole

the_rock — Tue, 12 Dec 2023 13:07:03 GMT

Just be careful with that as I mentioned, but I dont see that making it worse than what it is, as long as you backup existing content...its Hail Mary attempt as they say, but personally, I would go for it, but, thats just me.

Andy