topic Re: R80.20 Mgmt API issue in API / CLI Discussion

R80.20 Mgmt API issue

Basilio_Alcant1 — Wed, 15 May 2019 14:55:51 GMT

We need help with this issue happening in R80.20 , we see the API service stopping randomly and at that point we need to manually restart the service but of course we are trying to find out what is causing it to stop running randomly , this is very annoying.

Below is the output of the API status when the issue happens:

API Settings:
---------------------
Accessibility: Require all granted
Automatic Start: Enabled

Processes:

Name State PID More Information
-------------------------------------------------
API Stopped
CPM Started 4929 Check Point Security Management Server is running and ready
FWM Started 2192
APACHE Started 4180

Port Details:
-------------------
JETTY Internal Port: 50276
APACHE Gaia Port: 4434 (a non-default port)
When running mgmt_cli commands add '--port 4434'
When using web-services, add port 4434 to the URL

--------------------------------------------
Overall API Status: The API Server Is Not Running!
--------------------------------------------

Notes:
------------
To collect troubleshooting data, please run 'api status -s <comment>'

[Expert@cglscc4a:0]# api status

API Settings:
---------------------
Accessibility: Require all granted
Automatic Start: Enabled

Processes:

Name State PID More Information
-------------------------------------------------
API Stopped
CPM Started 4929 Check Point Security Management Server is running and ready
FWM Started 2192
APACHE Started 4180

--------------------------------------------
Overall API Status: The API Server Is Not Running!
--------------------------------------------

Notes:
------------
To collect troubleshooting data, please run 'api status -s <comment>'

Re: R80.20 Mgmt API issue

Dominik_Hofman1 — Wed, 15 May 2019 15:27:49 GMT

Hi,

it is my first post here 🙂

so we had the same issue.

take a look at this sk119553

it helped for us starting on Version R80 till R80.20

Brgds

Dominik

Re: R80.20 Mgmt API issue

Timothy_Hall — Wed, 15 May 2019 18:26:05 GMT

Is the API interface getting pounded by lots of simultaneous operations? If so you may need to increase the amount of memory allocated to the API daemon, see here: sk119553: Security Management API server crashes under heavy load

Run api status -s blah then unzip the archive it produces. Poke around in the various log files that were part of the archive, you will probably find some interesting log entries related to the crash. Or just send the archive to TAC for inspection.

Re: R80.20 Mgmt API issue

John_Fulater — Thu, 16 May 2019 01:43:18 GMT

I agree with Tim. Even though the SK stats that it was fixed int R80.20, I have had to increase the API memory on all our management environments (MDS and SDS).

Re: R80.20 Mgmt API issue

Basilio_Alcant1 — Thu, 16 May 2019 17:41:40 GMT

I m getting "command not found" when trying to run the commands suggested on sk119553 ... Am i doing something wrong??

[Expert@cglscc4a:0]# $ echo "_cpprof_add NGM_WEB_API_MAX_MEMORY 4096 0 0" >> /opt/CPshared/5.0/tmp/.CPprofile.sh
bash: $: command not found

Re: R80.20 Mgmt API issue

Timothy_Hall — Thu, 16 May 2019 17:43:55 GMT

Do not include the $ symbol at the start.

Re: R80.20 Mgmt API issue

Basilio_Alcant1 — Thu, 16 May 2019 18:38:04 GMT

Thanks Tim, that did it!

Re: R80.20 Mgmt API issue

PhoneBoy — Mon, 20 May 2019 03:03:34 GMT

How much RAM and CPU do you have allocated for your management?

Re: R80.20 Mgmt API issue

John_Fulater — Mon, 20 May 2019 16:15:00 GMT

I have 12 cores and 64gig ram - It is running on VMware.

Re: R80.20 Mgmt API issue

Raj_Khatri — Wed, 19 Jun 2019 12:18:54 GMT

We are experiencing the same issue as well after going to R80.20 where the API service keeps stopping. We had the 2 commands added when we were running R80.10 which did the trick. I just applied on R80.20 although it says it was fixed, so fingers crossed.... will continue to monitor.

#echo "_cpprof_add NGM_WEB_API_MAX_MEMORY 4096 0 0" >> /opt/CPshared/5.0/tmp/.CPprofile.sh
#echo "_cpprof_add NGM_WEB_API_JRE_64 1 0 0" >> /opt/CPshared/5.0/tmp/.CPprofile.sh
#api restart

Re: R80.20 Mgmt API issue

Raj_Khatri — Thu, 20 Jun 2019 11:41:24 GMT

Appears the issue is resolved and API service is remaining up. Received confirmation from TAC that the fix is built into R80.20 but the commands still need to be added. Previously, a hotfix for R80.10 was required in order for the commands to work.

Re: R80.20 Mgmt API issue

Goli_Kohsari — Wed, 04 Sep 2019 08:03:35 GMT

After adding the fix sk119553 on top of HF mgmt_wrapper_HOTFIX_R80_20_JHF_4
7_GEN_879_MAIN_GA_FULL.tgz on top of R80.20 HF 87 we have Overall API Status: Waiting for CPM to start on mds and cma level have a TAC opened waiting for R&D to do further investigation why CPM is showing Waiting even that is up and no issue with Gui connectivity but API seems to be stable

Re: R80.20 Mgmt API issue

Goli_Kohsari — Thu, 19 Sep 2019 12:30:55 GMT

CPM issue been resolve by creating the missing file cpm.pid cd /opt/CPsuite-R80.20/fw1/tmp echo "CPM" > cpm.pid

Re: R80.20 Mgmt API issue

BalasNave — Wed, 19 Aug 2020 11:09:14 GMT

Hello , I try to start API service ( status stopped)

I got message "warning waiting for file mgmt_api_profile_settings.xml to be created "

And nothing happen , fresh Gaya install , what should I do ?

Thanks by head

Re: R80.20 Mgmt API issue

StaxNet — Fri, 18 Sep 2020 09:46:24 GMT

i got the same Issue !! I'm stuck at my project
Please any help ?

Re: R80.20 Mgmt API issue

_Val_ — Fri, 18 Sep 2020 10:38:50 GMT

Please post output of "api status" command.