Unable to login to Security Gateway in Console, SSH, or Gaia Portal

[PeterB]

Hello everyone,

There is a problem with the admin login on our Checkpoint IP 395 with GAIA OS R77.30. After entering the username in Console, or SSH, the login process is restarted and a"Permission denied" error when trying to log in Gaia Portal.

The steps from sk109114 were carried out, but did not solve the error. Are there any other possibilities? 

[PhoneBoy]

This is definitely way out of support and a very uncommon configuration to boot.

What is your intended purpose in trying to gain access to this system?

[PeterB]

Thank you very much for the quick response. We know that this is an old system, but we need access to be able to install the patch for CVE-2024-24919.

[the_rock]

IP395? wow, never thought would see that model mentioned here these days lol

Anyway, did you try physically powercycle it and carry out those steps?

Andy

[PeterB]

Thank you very much for your feedback. We have carried out the specified steps and performed a power cycle via our Security Management Server. But the login behavior has not changed.

[the_rock]

I have no clue then mate, sorry : - (.

[PeterB]

Thanks for your help ... 👍

[the_rock]

I found some stuff online about it, more generally related to linux and they all say its most likely permission issues with the account. Is there another admin account you can try?

Andy

[PeterB]

No, unfortunately there is no other admin account on the gateway.

Peter

[Bob_Zimmerman]

Try using cprid_util on the management to show the contents of /var/log/secure:

$CPDIR/bin/cprid_util -server <IP_of_Gateway> -verbose rexec -rcmd cat /var/log/secure

This should give you more information about what is going wrong.

[PeterB]

When I try to log in to the system as the admin user via SSH, I get the log message:
“sshd[2590]: Failed password for... ”
When I try to log in as the same admin user via the console, I get the log message:
“Login: Permission denied”
Peter

[Bob_Zimmerman]

These commands on your management should add a new user named "backupAdmin" with the password set to '1qaz!QAZ':

firewall="<IP_of_Gateway>"

scriptFile=$(mktemp)
cat << 'EOF' > "${scriptFile}"
add user backupAdmin uid 0 homedir /home/backupAdmin
add rba user backupAdmin roles adminRole
set user backupAdmin gid 100 shell /bin/bash
set user backupAdmin password-hash $6$rounds=10000$hv3SByNB$0g9QWW2Peb0KNHBQvFdMsYPmFAV9Q1HP2jsBeO5RzlqAqMZWxRNNOgTbqVqoeFclLMDYLp/ojcDqlD2JDkQrA1
EOF

$CPDIR/bin/cprid_util -server "${firewall}" putfile -local_file "${scriptFile}" -remote_file "${scriptFile}" -perms 444
$CPDIR/bin/cprid_util -server "${firewall}" rexec -rcmd clish -s -f "${scriptFile}"

Replace <IP_of_Gateway> with the address your management uses to refer to the specific box, same as before.