objects are locked but there no sessions can be takeover or published

[Marco_Huang1]

Management server running on R80.10. I've got some objects locked by admin, but checked Session table there are no active sessions holding them.

I was using API to modifying the objects, few times the publish process was hung and "lost connection to API server". I then reboot the server. I guess this probably the cause... Does anyone have an idea how to unlock those objects? Thanks

Screenshot attached. 

 

[Neil_ZInk]

I came across the same issue. I had to reboot the management server to fix my issue.

[Ran_Kopelman]

Hi Marco 

I'm Ran and I'm a manger in the R&D of Check Point, responsible for I/S in the Management Server.

First, thanks for raising this issue.

I would like to contact you in person in order to analyse this issue properly.

Dameon can you please assist 

https://community.checkpoint.com/people/dwelccfe6e688-522c-305c-adaa-194bd7a7becc‌

Thanks 

Ran

[PhoneBoy]

I will send you Marco's details offline.

[burakyalcinkaya]

Hi,

I have a same issue. İs there anybody help me?

Thanks

[Marco_Huang1]

Thanks Ran and Dameon! I will wait for your followup.

[Joshua_Boerum]

What was the solution for this issue? I am having a similar issue where a group on two domains are locked and there are no sessions for the user locking the object. 

[PhoneBoy]

I sent your contact info privately to https://community.checkpoint.com/people/ranko795bc55d-ed02-437c-a4f3-88d212bddb02‌

I recommend opening a TAC case on this also.

I'll see if there's a general solution we can share.

[Hugo_vd_Kooij]

There is a TAC case open. I need to look into the issue next week as I have no access to the system this week.

[Natan_Chamilevs]

Hi Joshua, my name is Natan and I'm a software developer in Ran's crew.

In order to investigate and solve this issue, I'd like to talk to you.

Dameon Welch Abernathy , could you please help by sending me Joshua's contact info?  

Thank you,

Natan

[PhoneBoy]

It's in your inbox now

[Hugo_vd_Kooij]

Marco,

You might want to dig into the session list:

psql_client cpm postgres -c "select objid,applicationname,username from worksession where not state='PUBLISHED';"

sk113955

[Hugo_vd_Kooij]

Even more fun:

[Expert@fwmgmt:0]# psql_client cpm postgres -c "select objid,applicationname,username,numberoflocks from worksession where not state='PUBLISHED' and numberoflocks > 0;"
objid | applicationname | username | numberoflocks
--------------------------------------+---------------------------+------------+---------------
b15c8521-dfa0-4ac1-aaf0-d93c421f4807 | SmartConsole | admin-hvdk | 5
47c02486-942b-41f0-9cc3-cb68101683c7 | WEB_API | admin-hvdk | 1182
bbf33d06-de48-4c3e-bd72-43e34c7903f8 | Endpoint Security Console | admin-hvdk | 1
b90522cd-53c8-4d75-a58c-e441f77d95d4 | Endpoint Security Console | admin-hvdk | 1
6c4e69fa-92d4-44da-b377-c25390e1da01 | Endpoint Security Console | admin-hvdk | 3
5cd20dc9-6a77-4456-a733-c5bcae44e5b4 | SmartConsole | admin-hvdk | 1
(6 rows)

Then you can use the objid to discard or publish that session.

Mind you that you be careful as you do a lot of damage if you discard or publish the wrong session.

[Robert_Decker]

this thread may contain a solution... - 

https://community.checkpoint.com/thread/7293-best-way-to-handle-locked-session-locked-but-not-availa...

Robert.

[Michael_Braun]

Has this been fixed Dameon Welch Abernathy? I have been doing some testing with the Web API and i keep running into this issue. 

[PhoneBoy]

I would recommend engaging with the TAC if you keep running into this issue so we can isolate and fix the issue.