Authentication to SmartConsole failed

[MRAHOUI]

My checkpoint suddenly showed the error "Authentication Failed" when I try to connect to the SmartConsole using an account from my domain, my checkpoint uses RADIUS.

And when I reviewed the Audit log it showed me that the error reason is a wrong password, yet I'm sure my password isn't wrong. Proof is that I tried with my colleague's account and I had the same issue.

The rule responsible for my connection to the RADIUS server is accepting traffic and the Even Viewer on my RADIUS Server shows that the user authentication was successful yet I can't authenticate.

[AkosBakos]

Hi @MRAHOUI 

Is you password longer than 16 characters?
https://support.checkpoint.com/results/sk/sk13740

Br

Akos

[the_rock]

To get around this, for the time being, just create new user and log in and then you can fix whatever needed. From cpconfig menu in ssh, expert mode, just choose administrator, add new one, follow the prompts, then issue cpstop/cpstart, wait few mins, until api is started (you can run api status to check) and thats it, it will work to log in with new account.

Andy

[Expert@CP-MANAGEMENT:0]# cpconfig
This program will let you re-configure
your Check Point Security Management Server configuration.

Configuration Options:
----------------------
(1) Licenses and contracts
(2) Administrator
(3) GUI Clients
(4) SNMP Extension
(5) Random Pool
(6) Certificate Authority
(7) Certificate's Fingerprint
(8) Automatic start of Check Point Products

(9) Exit

Enter your choice (1-9) :2

Configuring Administrator...
============================
You can view the list of administrators in the Manage and Settings tab in the SmartConsole.

Do you want to add an administrator (y/n) [y] ?

[Lesley]

I suspect Radius got updated for this CVE: https://support.checkpoint.com/results/sk/sk182516

Then follow -> Smart Console section:

https://support.checkpoint.com/results/sk/sk42184

I had to request patch for my mgmt and got solved. Patch is very small and easy to install. Was requested via SR.