topic CheckPoint - Issue with command: show users in Firewall and Security Management

CheckPoint - Issue with command: show users

LM_51 — Tue, 20 Jun 2023 21:41:28 GMT

Hello all,

We are facing a problem when using a (service user - with admin rights) that connects via Radius server for a Checkpoint Device 1 and after execute the command (in clish mode): show users it logout with any error message.

Checkpoint device is on Version R81.10 Kernel: 3.10.0-957.21.3cpx86_64.

Also, on this Checkpoint Device 1 if we log wiht our regular Radius users (with admin rights), and we execute the same command (in clish mode): show users, it list the users but we get a "Segmentation fault" message at the end of the users list.

On the other hand, we have other Checkpoint Device 2 with exactly the same version and same Kernel, and it works with the same (service user - with admin rights) and with our regular Radius users.

Any ideas/solutions ?

We will appreciate.

Re: CheckPoint - Issue with command: show users

PhoneBoy — Tue, 20 Jun 2023 21:45:57 GMT

Recommend a TAC case here: https://help.checkpoint.com

Re: CheckPoint - Issue with command: show users

Chris_Atkinson — Wed, 21 Jun 2023 01:24:08 GMT

How does the installed Jumbo (JHF) take differ between the two machines if at all?

Re: CheckPoint - Issue with command: show users

nehakakar — Fri, 23 Jun 2023 11:42:50 GMT

The issue you're facing with the "show users" command on Checkpoint Device 1, causing a logout and segmentation fault, may be related to configuration or permission settings. I recommend checking the service user's configuration, verifying the Radius server settings, and comparing the configuration between Device 1 and Device 2. If the problem persists, contact Check Point support for further assistance.

Re: CheckPoint - Issue with command: show users

the_rock — Fri, 23 Jun 2023 13:03:10 GMT

I think what @nehakakar said makes perfect sense.

Andy

Re: CheckPoint - Issue with command: show users

LMartins — Thu, 17 Aug 2023 07:58:47 GMT

Hello nehakakar,

I think I found the problem regarding this link on Check Point: https://support.checkpoint.com/results/sk/sk153952

clish -c "show users" -d 5 > users_debug.txt

queryFPCandLOU(user=halt, loutoo=1)
FPC results: exp=n adm=n pol=n days=90
LOU results: exp=n adm=n pol=n tal=n non=n
Segmentation fault

The user that was causing the problem is the user "halt" /sbin/halt, my question is:

We can't delete and create this user again, right ?

Any ideas ?

Thanks in advance.

PREVI

Re: CheckPoint - Issue with command: show users

LMartins — Mon, 21 Aug 2023 08:47:17 GMT

Hello,

I think I found the problem regarding this link on Check Point: https://support.checkpoint.com/results/sk/sk153952

clish -c "show users" -d 5 > users_debug.txt

queryFPCandLOU(user=halt, loutoo=1)
FPC results: exp=n adm=n pol=n days=90
LOU results: exp=n adm=n pol=n tal=n non=n
Segmentation fault

The user that was causing the problem is the user "halt" /sbin/halt, my question is:

We can't delete and create this user again, right ?

Any ideas ?

Thanks in advance.

Re: CheckPoint - Issue with command: show users

PhoneBoy — Mon, 21 Aug 2023 14:49:34 GMT

"halt" is one of our default users that cannot be disabled/removed: https://support.checkpoint.com/results/sk/sk98678
As I suggested earlier, please consult with the TAC: https://help.checkpoint.com

Re: CheckPoint - Issue with command: show users

LMartins — Tue, 22 Aug 2023 08:21:12 GMT

Thank you for your answer.

Re: CheckPoint - Issue with command: show users

G_W_Albrecht — Tue, 22 Aug 2023 08:47:02 GMT

sk153952 is only valid for EOL R80.10, so contacting CP TAC is the right suggestion here...