topic Unable to login to smartconsole - Administrator was not found in fwm database in General Topics

Unable to login to smartconsole - Administrator was not found in fwm database

SriNarasimha005 — Fri, 12 Jul 2019 00:16:34 GMT

Hi Check Mates,

Greetings. We're running on R80.10 and all of a sudden we're unable to login to Smart console using RADIUS credentials. Username is configured on smart console and it's validated against external RADIUS server.

On debugging FWM process, we noticed that username wasn't found in fwm database though i'm using correct username and password. sk13740 suggesting for version 2.0 Radius server and we're already been running on 2.0 and no changes made recently.

FYI- the same RADIUS server is used for VPN authentication which is working fine. Could you please assist.

Log: checkpoint administrator event guessing; Unauthorized entry

[FWM 4473 40367123]@MGT-SERVER[11 Jul 23:39:12] fwm_auth_client_machine_ip: accept client 10.X.X.X
[FWM 4473 40367123]@MGT-SERVER[11 Jul 23:39:12] Administrator srinivasan was not found in fwm database
[FWM 4473 40367123]@MGT-SERVER[11 Jul 23:39:12] ERROR: fwadb_fetch failed to fetch user srinivasan

[FWM 4473 40367123]@MGT-SERVER[11 Jul 23:39:12] au_realm_set_unique_user_id: Key: CN=srinivasan,OU=User,OU=users,O=Management
[FWM 4473 40367123]@MGT-SERVER[11 Jul 23:39:12] is_in_remote_auth_group: empty remote_auth_group

Re: Unable to login to smartconsole - Administrator was not found in fwm database

PhoneBoy — Mon, 15 Jul 2019 02:52:51 GMT

Best to get the TAC involved so we can troubleshoot, particularly if this was working previously.

Re: Unable to login to smartconsole - Administrator was not found in fwm database

_Val_ — Mon, 15 Jul 2019 06:58:02 GMT

I suspect connectivity issue between Radius server and SMS, but yes, if you are out of your depth, engage TAC

Re: Unable to login to smartconsole - Administrator was not found in fwm database

Amogha_Chandras — Mon, 15 Jul 2019 07:21:05 GMT

Please reach out to India TAC Contact: 0008000507005 or use the live chat in case of urgency.