topic Re: Smart Console open shell - saving fingerprint failed! How correct it? in Firewall and Security Management

Smart Console open shell - saving fingerprint failed! How correct it? - solved

DH — Fri, 06 Jan 2023 10:09:02 GMT

Version R81.10 JHF take 79
Console R81.10 build 410

I have a change fingerprint of a reinstalled gateway.

SSH from SmartManagement Server CLI to gateway worked.

SSH by SmartConsole =>Open Shell shows a potential security break (that's known because of the reinstallation),
but the option 'Ok'/'Yes'(?) to save the fingerprint do failed with message. - I think 'No' should be 'Cancel'...😉

"saving fingerprint failed for <IP>.
fingerprint won't be saved. "

after that message the connection to the gateway is still possible.

Other new/unknown fingerprints will be saved that way...

My questions:
Where will this fingerprints be saved?
How can they safely be edit?

Re: Smart Console open shell - saving fingerprint failed! How correct it?

the_rock — Thu, 05 Jan 2023 17:35:02 GMT

Just to make sure I understand this, the screenshot you attached is what you see when trying to open gateway shell from the object in dashboard?

Re: Smart Console open shell - saving fingerprint failed! How correct it?

DH — Thu, 05 Jan 2023 17:45:19 GMT

Yes in

Smart Console=>Gateways and Servers=>Gateway Object=>Action=>Open Shell..after input the login Credentials. - The gateway was before reinstalled and the trust restablished, so it is correct, that the fingerprint was changed, but I'm unable to save the new fingerprint inside the GUI.

Re: Smart Console open shell - saving fingerprint failed! How correct it?

PhoneBoy — Thu, 05 Jan 2023 20:10:55 GMT

You might try accessing the host from the management server via SSH and save the fingerprint there…using the admin user.

Re: Smart Console open shell - saving fingerprint failed! How correct it?

the_rock — Thu, 05 Jan 2023 20:19:28 GMT

I was going to suggest same thing @PhoneBoy mentioned...so say from your mgmt ssh session expert mode, you can type ssh admin@10.10.10.50 (or whatever fw IP is), accept whetever is prompted on the screen and once connected, close the session and then try same method that was failing originally.

Andy

Re: Smart Console open shell - saving fingerprint failed! How correct it?

DH — Thu, 05 Jan 2023 21:54:13 GMT

I tried that already before...SSH to Mgmt => ssh from Mgmt to gateway => store the key (it was stored then unter ~/.ssh/known_hosts as usual under linux.) this worked inside the expert mode.
But this did not resolve the problem inside the SmartConsole GUI.

So the question is still were did the console store the fingerprints?

Re: Smart Console open shell - saving fingerprint failed! How correct it?

PhoneBoy — Thu, 05 Jan 2023 23:14:45 GMT

The only other place I can think of is the same place in the root user (i.e. under /root).
Otherwise, I suggest a TAC case.

Re: Smart Console open shell - saving fingerprint failed! How correct it?

the_rock — Fri, 06 Jan 2023 00:56:44 GMT

And it did prompt you to accept the "key" when you did this?

Re: Smart Console open shell - saving fingerprint failed! How correct it?

DH — Fri, 06 Jan 2023 08:29:54 GMT

I found the major part of the solution by myself.

It seems a other AdminUser got this message before, accept (yes) it, but he didn't publish it.

I found a "edited ssh settings entry" in the changes of his session! - it was the only change in this session, so I discard that session and now I didn't got an error message anymore, after I accept the new key!
The root problem is solved and it seems the fingerprint are stored inside the database.

@cp : Why did the GUI not clear inform, that this setting is locked by a other user - that should be the correct message!