topic Re: CLINFR0819 User: admin denied access via CLI in Firewall and Security Management

CLINFR0819 User: admin denied access via CLI

Blason_R — Mon, 03 Jan 2022 13:47:59 GMT

[Expert@R81.10_MGMT:0]# clish
CLINFR0819 User: admin denied access via CLI

[Expert@R81.10_MGMT:0]# fwm ver
This is Check Point Security Management Server R81.10 - Build 220

Re: CLINFR0819 User: admin denied access via CLI

Chris_Atkinson — Mon, 03 Jan 2022 15:51:24 GMT

More information, Jumbo take, User permissions - what have you tried (troubleshooting)?

Re: CLINFR0819 User: admin denied access via CLI

Blason_R — Mon, 03 Jan 2022 15:20:21 GMT

I am unable to go to clish mode. I have User permission admin rights already. As you can see in sreenshot. I am in expert mode. I would like to go to clish mode it is showing access denied. refer below screen shot.

[CPUpdates]
BUNDLE_CORE_FILE_UPLOADER_AUTOUPDATE Take: 11
BUNDLE_NGM_DOCTOR_AUTOUPDATE Take: 15
BUNDLE_INFRA_AUTOUPDATE Take: 49
BUNDLE_DEP_INSTALLER_AUTOUPDATE Take: 23
BUNDLE_R81_10_JUMBO_HF_MAIN Take: 9
BUNDLE_DC_CONTENT_AUTOUPDATE Take: 12
BUNDLE_GOT_MGMT_AUTOUPDATE Take: 95
BUNDLE_DC_INFRA_AUTOUPDATE Take: 26
BUNDLE_WEBCONSOLE_AUTOUPDATE Take: 44
BUNDLE_HCP_AUTOUPDATE Take: 48
BUNDLE_GOT_TPCONF_MGMT_AUTOUPDATE Take: 34

[hcp_wrapper]
HOTFIX_HCP_AUTOUPDATE

[itp_wrapper]
HOTFIX_GOT_MGMT_AUTOUPDATE

[core_uploader]
HOTFIX_CHARON_HF

[Expert@R81.10_MGMT:0]#

Re: CLINFR0819 User: admin denied access via CLI

Bruno_Petronio — Mon, 03 Jan 2022 16:21:34 GMT

Not mentioned to be seen in a SMS neither this version but check sk121764.

Re: CLINFR0819 User: admin denied access via CLI

mcatanzaro — Mon, 03 Jan 2022 16:43:01 GMT

sk102828 looks like it could be a potential match as well.

Any interesting prints in the syslog at the point of failure?

I think a reboot to see if it’s an issue with missing files in /tmp is worth a shot.

Re: CLINFR0819 User: admin denied access via CLI

Blason_R — Tue, 04 Jan 2022 05:38:45 GMT

@Chris_Atkinson, @mcatanzaro , @Bruno_Petronio I tried troubleshooting with the both SK (sk121764, sk102828 ) and tired rebooting multiple times but nothig seems to be working out. Please guide for the resolution.

[Expert@R81.10_MGMT:0]# cpwd_admin list
APP PID STAT #START START_TIME MON COMMAND
CPVIEWD 7084 E 1 [08:56:28] 4/1/2022 N cpviewd
CPVIEWS 7089 E 1 [08:56:28] 4/1/2022 N cpview_services
CPD 7110 E 1 [08:56:28] 4/1/2022 Y cpd
FWD 7166 E 1 [08:56:29] 4/1/2022 N fwd -n
FWM 7169 E 1 [08:56:29] 4/1/2022 N fwm
FWMHA 7172 E 1 [08:56:30] 4/1/2022 N fwmha -H
STPR 7207 E 1 [08:56:31] 4/1/2022 N status_proxy
CLOUDGUARD 7261 E 1 [08:56:33] 4/1/2022 N vsec_controller_start
CPM 7644 E 1 [08:56:40] 4/1/2022 N /opt/CPsuite-R81.10/fw1/scripts/cpm.sh -s
SOLR 7659 E 1 [08:56:42] 4/1/2022 N java_solr
RFL 7719 E 1 [08:56:43] 4/1/2022 N LogCore
SMARTVIEW 7832 E 1 [08:56:46] 4/1/2022 N SmartView
INDEXER 7995 E 1 [08:56:55] 4/1/2022 N /opt/CPrt-R81.10/log_indexer/log_indexer
SMARTLOG_SERVER 8422 E 1 [08:57:05] 4/1/2022 N /opt/CPSmartLog-R81.10/smartlog_server
REPMAN 8791 E 1 [08:57:08] 4/1/2022 N java_repository_manager
DASERVICE 8838 E 1 [08:57:08] 4/1/2022 N DAService_script
AUTOUPDATER 8868 E 1 [08:57:08] 4/1/2022 N AutoUpdaterService.sh
LPD 11777 E 1 [08:58:08] 4/1/2022 N lpd
CPSM 13680 E 1 [08:59:18] 4/1/2022 N cpstat_monitor.

Re: CLINFR0819 User: admin denied access via CLI

Chris_Atkinson — Tue, 04 Jan 2022 05:41:05 GMT

Please contact TAC to resolve if not already in contact with them.