Unable to make changes to gateway

[Nuggeteer]

This is a lab environment. Within the SmartConsole I'm having problems with a gateway. I'm not able to disable blades and I believe there's some sort of corruption going on. I even tried deleting the gateway entirely so I could just deploy a new one for testing but I'm not able to delete the gateway from the console and I've verified it's not associated with any policies or objects. I get this error when I turn on debugging for the EclipseExceptionHandler. Here I was trying to delete the gateway from the console:

 I've been fighting with this gateway since enabling autonomous threat prevention (again this is a lab). I've had to reset SIC, fight with locked sessions, etc. Honestly, it's been a pretty bad experience and I'm not sure what's going on with it. Any feedback would be appreciated.

[Lesley]

Everything up to date or atleast recent jumbo version?

SmartConsole also up to date? 

Most people install R81.20 or something in lab and forget to update after to recent jumbo

[Nuggeteer]

I did see a jumbo version update was available so I updated SMS and Gateways. Now I'm getting a different error (see images).

 

 

Then I checked the cpm.elg file and is says:

 So i took a look at the inactive-tx.ellg and the last entry is this:

========================================================================================
24/10/2024 10:22:04,083 EDT Transaction ended with no actual database access. Trace:
java.lang.Throwable
        at com.checkpoint.management.object_store.ObjectStoreSessionImpl.checkDirtyFlag(ObjectStoreSessionImpl.java:158)
        at com.checkpoint.management.object_store.ObjectStoreSessionImpl.commitTransaction(ObjectStoreSessionImpl.java:1000)
        at com.checkpoint.management.dleserver.coresvc.internal.ObjectStoreSessionManager.onAfterJpaTransactionCommit(ObjectStoreSessionManager.java:51)
        at com.checkpoint.management.dleserver.coresvc.internal.AbstractTransactionAwareBean$3.onNotification(AbstractTransactionAwareBean.java:1)
        at com.checkpoint.management.dleserver.coresvc.internal.InterBeanNotificationSvcImpl.notifySubscriber(InterBeanNotificationSvcImpl.java:258)
        at com.checkpoint.management.dleserver.coresvc.internal.InterBeanNotificationSvcImpl.publish(InterBeanNotificationSvcImpl.java:93)
        at com.checkpoint.management.dleserver.coresvc.internal.ObjectStoreJpaTransactionManager.doCommit(ObjectStoreJpaTransactionManager.java:199)
        at org.springframework.transaction.support.AbstractPlatformTransactionManager.processCommit(AbstractPlatformTransactionManager.java:754)
        at org.springframework.transaction.support.AbstractPlatformTransactionManager.commit(AbstractPlatformTransactionManager.java:723)
        at org.springframework.transaction.interceptor.TransactionAspectSupport.commitTransactionAfterReturning(TransactionAspectSupport.java:393)
        at org.springframework.transaction.aspectj.AbstractTransactionAspect.ajc$afterReturning$org_springframework_transaction_aspectj_AbstractTransactionAspect$3$2a73e96c(AbstractTransactionAspect.aj:78)
        at com.checkpoint.management.web_api.web_services.WebApiEntryPoint.invokeWebApiCommandTransactionalRW_aroundBody0(WebApiEntryPoint.java:567)
        at com.checkpoint.management.web_api.web_services.WebApiEntryPoint$AjcClosure1.run(WebApiEntryPoint.java:1)
        at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149)
        at com.checkpoint.management.dle.aspects.OperationSyncAspect.syncRequiredForPublishOperation(OperationSyncAspect.java:109)
        at com.checkpoint.management.dle.aspects.OperationSyncAspect.syncOperation(OperationSyncAspect.java:62)
        at com.checkpoint.management.dle.aspects.OperationSyncAspect.ajc$inlineAccessMethod$com_checkpoint_management_dle_aspects_OperationSyncAspect$com_checkpoint_management_dle_aspects_OperationSyncAspect$syncOperation(OperationSyncAspect.java:76)
        at com.checkpoint.management.dle.aspects.OperationSyncAspect.aroundRequiredForPublishOperation(OperationSyncAspect.java:240)
        at com.checkpoint.management.web_api.web_services.WebApiEntryPoint.invokeWebApiCommandTransactionalRW_aroundBody2(WebApiEntryPoint.java:104)
        at com.checkpoint.management.web_api.web_services.WebApiEntryPoint$AjcClosure3.run(WebApiEntryPoint.java:1)
        at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149)
        at com.checkpoint.management.dleserver.coresvc.internal.TransactionRetrySvcImpl.proceed(TransactionRetrySvcImpl.java:174)
        at com.checkpoint.management.dle.aspects.TransactionRetryAspect.aroundOperation(TransactionRetryAspect.java:16)
        at com.checkpoint.management.web_api.web_services.WebApiEntryPoint.invokeWebApiCommandTransactionalRW(WebApiEntryPoint.java:263)
        at com.checkpoint.management.web_api.web_services.WebApiEntryPoint.postEntryPoint(WebApiEntryPoint.java:589)
        at sun.reflect.GeneratedMethodAccessor1414.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
        at java.lang.reflect.Method.invoke(Method.java:508)
        at org.apache.cxf.service.invoker.AbstractInvoker.performInvocation(AbstractInvoker.java:180)
        at org.apache.cxf.service.invoker.AbstractInvoker.invoke(AbstractInvoker.java:96)
        at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:191)
        at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:101)
        at org.apache.cxf.interceptor.ServiceInvokerInterceptor$1.run(ServiceInvokerInterceptor.java:59)
        at org.apache.cxf.interceptor.ServiceInvokerInterceptor.handleMessage(ServiceInvokerInterceptor.java:96)
        at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:309)
        at org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
        at org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:267)
        at org.apache.cxf.transport.http_jetty.JettyHTTPDestination.doService(JettyHTTPDestination.java:234)
        at org.apache.cxf.transport.http_jetty.JettyHTTPHandler.handle(JettyHTTPHandler.java:76)
        at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1129)
        at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1065)
        at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)
        at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:215)
        at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97)
        at org.eclipse.jetty.server.Server.handle(Server.java:497)
        at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:310)
        at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:257)
        at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:540)
        at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635)
        at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555)
        at java.lang.Thread.run(Thread.java:825)

Thank you.

[Nuggeteer]

Yes, everything is up to date.

Looking at the original error message it looks like maybe the object is locked by an old session that is no longer live, but it's stuck. Like this: https://support.checkpoint.com/results/sk/sk168792

Can I fix this on my own? This is a lab that I use quite a lot to learn and test out blades with.

[PhoneBoy]

What shows in $FWDIR/log/cpm.elg related to this?

[Nuggeteer]

$FWDIR/log/cpm.elg output:

25/10/24 16:04:40,490 WARN INACTIVE_TRANSACTIONS [taskExecutor-61]: Transaction ended with no actual database access. See /opt/CPsuite-R81.20/fw1/log/inactive-tx.elg for details
25/10/24 16:04:40,492 WARN INACTIVE_TRANSACTIONS [taskExecutor-57]: Transaction ended with no actual database access. See /opt/CPsuite-R81.20/fw1/log/inactive-tx.elg for details
25/10/24 16:04:40,505 WARN INACTIVE_TRANSACTIONS [taskExecutor-57]: Transaction ended with no actual database access. See /opt/CPsuite-R81.20/fw1/log/inactive-tx.elg for details

/opt/CPsuite-R81.20/fw1/log/inactive-tx.elg output:

========================================================================================
25/10/2024 16:06:40,698 EDT Transaction ended with no actual database access. Trace:
java.lang.Throwable
at com.checkpoint.management.object_store.ObjectStoreSessionImpl.checkDirtyFlag(ObjectStoreSessionImpl.java:158)
at com.checkpoint.management.object_store.ObjectStoreSessionImpl.commitTransaction(ObjectStoreSessionImpl.java:1000)
at com.checkpoint.management.dleserver.coresvc.internal.ObjectStoreSessionManager.onAfterJpaTransactionCommit(ObjectStoreSessionManager.java:51)
at com.checkpoint.management.dleserver.coresvc.internal.AbstractTransactionAwareBean$3.onNotification(AbstractTransactionAwareBean.java:1)
at com.checkpoint.management.dleserver.coresvc.internal.InterBeanNotificationSvcImpl.notifySubscriber(InterBeanNotificationSvcImpl.java:258)
at com.checkpoint.management.dleserver.coresvc.internal.InterBeanNotificationSvcImpl.publish(InterBeanNotificationSvcImpl.java:93)
at com.checkpoint.management.dleserver.coresvc.internal.ObjectStoreJpaTransactionManager.doCommit(ObjectStoreJpaTransactionManager.java:199)
at org.springframework.transaction.support.AbstractPlatformTransactionManager.processCommit(AbstractPlatformTransactionManager.java:754)
at org.springframework.transaction.support.AbstractPlatformTransactionManager.commit(AbstractPlatformTransactionManager.java:723)
at org.springframework.transaction.interceptor.TransactionAspectSupport.commitTransactionAfterReturning(TransactionAspectSupport.java:393)
at org.springframework.transaction.aspectj.AbstractTransactionAspect.ajc$afterReturning$org_springframework_transaction_aspectj_AbstractTransactionAspect$3$2a73e96c(AbstractTransactionAspect.aj:78)
at com.checkpoint.management.dleserver.coresvc.internal.WorkSessionMgmtSvcImpl.getOsIdShort_aroundBody254(WorkSessionMgmtSvcImpl.java:3098)
at com.checkpoint.management.dleserver.coresvc.internal.WorkSessionMgmtSvcImpl$AjcClosure255.run(WorkSessionMgmtSvcImpl.java:1)
at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149)
at com.checkpoint.management.dleserver.coresvc.internal.TransactionRetrySvcImpl.proceed(TransactionRetrySvcImpl.java:174)
at com.checkpoint.management.dle.aspects.TransactionRetryAspect.aroundOperation(TransactionRetryAspect.java:16)
at com.checkpoint.management.dleserver.coresvc.internal.WorkSessionMgmtSvcImpl.getOsIdShort(WorkSessionMgmtSvcImpl.java:1426)
at com.checkpoint.management.dleserver.coresvc.internal.WorkSessionMgmtSvcImpl.discard(WorkSessionMgmtSvcImpl.java:1514)
at com.checkpoint.management.dleserver.coresvc.internal.WorkSessionMgmtSvcImpl.discard(WorkSessionMgmtSvcImpl.java:1939)
at com.checkpoint.management.dleserver.coresvc.internal.LoginSvcImpl.logoutConsiderDiscard(LoginSvcImpl.java:3993)
at com.checkpoint.management.dleserver.coresvc.internal.LoginSvcImpl.logoutWithRequest(LoginSvcImpl.java:392)
at com.checkpoint.management.web_api_is.utils.RemoteSessionUtils.logout_aroundBody4(RemoteSessionUtils.java:118)
at com.checkpoint.management.web_api_is.utils.RemoteSessionUtils$AjcClosure5.run(RemoteSessionUtils.java:1)
at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149)
at com.checkpoint.management.web_api_is.aspects.logging.WebApiMethodLoggerAspect.aroundMethodLoggerTest(WebApiMethodLoggerAspect.java:16)
at com.checkpoint.management.web_api_is.utils.RemoteSessionUtils.logout(RemoteSessionUtils.java:173)
at com.checkpoint.management.web_api.core.handler.commands.session.logout.WebApiLogoutRequestHandler.logout(WebApiLogoutRequestHandler.java:4)
at sun.reflect.GeneratedMethodAccessor1739.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
at java.lang.reflect.Method.invoke(Method.java:508)
at com.checkpoint.management.web_api_is.utils.WebApiReflectionUtils.invoke(WebApiReflectionUtils.java:1)
at com.checkpoint.management.web_api.web_services.WebApiEntryPoint.invokeWebApiCommand(WebApiEntryPoint.java:367)
at com.checkpoint.management.web_api.web_services.WebApiEntryPoint.postEntryPoint(WebApiEntryPoint.java:454)
at sun.reflect.GeneratedMethodAccessor1414.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
at java.lang.reflect.Method.invoke(Method.java:508)
at org.apache.cxf.service.invoker.AbstractInvoker.performInvocation(AbstractInvoker.java:180)
at org.apache.cxf.service.invoker.AbstractInvoker.invoke(AbstractInvoker.java:96)
at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:191)
at org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:101)
at org.apache.cxf.interceptor.ServiceInvokerInterceptor$1.run(ServiceInvokerInterceptor.java:59)
at org.apache.cxf.interceptor.ServiceInvokerInterceptor.handleMessage(ServiceInvokerInterceptor.java:96)
at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:309)
at org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
at org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:267)
at org.apache.cxf.transport.http_jetty.JettyHTTPDestination.doService(JettyHTTPDestination.java:234)
at org.apache.cxf.transport.http_jetty.JettyHTTPHandler.handle(JettyHTTPHandler.java:76)
at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1129)
at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1065)
at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)
at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:215)
at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97)
at org.eclipse.jetty.server.Server.handle(Server.java:497)
at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:310)
at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:257)
at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:540)
at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635)
at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555)
at java.lang.Thread.run(Thread.java:825)

Thank you!

[Amir_Senn]

Maybe another session has lock on this object?

You can check it (see attached).

[Nuggeteer]

I checked again and still no locks showing up.

 

[Nuggeteer]

I also tried these two SK's dealing with locked objects and sessions and these both came up with no locks either.

https://community.checkpoint.com/t5/Management/How-to-release-lock-from-objects-in-R80-10/td-p/6969

https://community.checkpoint.com/t5/Management/clear-disconnected-sessions/td-p/33027

[Nuggeteer]

I decided to just rebuild the second gateway in the lab. After having the old gateway powered off for a while I decided to try to delete it from SmartConsole again and it let me do it this time. Really weird. No need to continue troubleshooting this issue. Thanks for all the suggestions!