topic Re: FWM Command in bash script in Firewall and Security Management

FWM Command in bash script

Dominik_Wasiele — Thu, 07 Jun 2018 13:42:48 GMT

Hello,

I try to run a bash script as a schedules task (admin user) via Gaia on a R77.30 management server. The purpose of the script is to use the "fwm logexport" command to convert log files to ascii format and then move the file over scp to a Linux server.

Everything works as expected when calling the script on the command line via expert mode. When the script runs from the cron job everything works the same except that the fwm command cannot be found.

When I just use "fwm" as command in the script I get this error: "fwm: command not found"

When I try to specify the whole path "/opt/CPsuite-R77/fw1/bin/fwm" I get this error: "/opt/CPsuite-R77/fw1/bin/fwm: error while loading shared libraries: libcplic_cntrct.so: cannot open shared object file: No such file or directory"

Thanks in advanced,

Dominik

Re: FWM Command in bash script

Timothy_Hall — Thu, 07 Jun 2018 13:56:51 GMT

Do you have the following early on in your script to properly set the different Check Point environment variables including PATH:

source /opt/CPshrd-R77/tmp/.CPprofile.sh

source /opt/CPshrd-R77/tmp/.CPprofile.csh

--
Second Edition of my "Max Power" Firewall Book
Now Available at http://www.maxpowerfirewalls.com

Re: FWM Command in bash script

Danny — Thu, 07 Jun 2018 14:10:33 GMT

I recommend to add the line below on top of your script:

source /etc/profile.d/CP.sh;‍‍

In case you also wish to create similar scripts on VSX systems, just add this line as well:

source /etc/profile.d/vsenv.sh;‍‍

Re: FWM Command in bash script

Dominik_Wasiele — Thu, 07 Jun 2018 14:34:33 GMT

Many thanks this solved my issue.

Re: FWM Command in bash script

Bryce_Myers — Thu, 07 Jun 2018 15:43:33 GMT

At the top of my cronjobs that require Checkpoint Environment Variables I use:

#Load Checkpoint Environment Variables
source /etc/profile.d/CP.sh
if [[ -e /etc/profile.d/vsenv.sh ]]; then
source /etc/profile.d/vsenv.sh
fi

The outcome should be the same as what Tim provided.

Re: FWM Command in bash script

Joseph_Audet — Thu, 01 Nov 2018 20:45:40 GMT

Thanks Bryce - this helped me out finishing a script today and having issues with the same error Dominik had, but on R80.20.

Re: FWM Command in bash script

dprimiceri — Wed, 15 Sep 2021 12:25:32 GMT

Hi Guys

i've just updated VSX R80.30 to R80.40 but the script doesn't work into crontab

Here the script:

#!/bin/bash -f
#
#
source /etc/profile.d/vsenv.sh;
vsenv 4
cphaprob state | grep local | grep ACTIVE >> /dev/null

if [ $? -eq 0 ]; then

echo "--- Vpn user counter ---" > /tmp/userc_users
fw tab -t userc_users -s > /tmp/userc_users

source /etc/profile.d/vsenv.sh;
vsenv 0
# Leggo il file temporaneo e mando il contenuto via mail
cat /tmp/userc_users | $FWDIR/bin/sendmail -s 'Test' -t 10.79.226.17 -f xxxx@yyy.it wwww@yyy.it

else
exit
fi

If i launc manually works

thanks in advance

Re: FWM Command in bash script

Jan_P_Larsson — Tue, 20 Aug 2024 19:52:34 GMT

Try to replace:

#!/bin/bash -f

with:

#!/bin/bash