Login to SmartConsole may fail while High Availability sync is running

Product

Multi-Domain Security Management

Version

R80.40 (EOS), R81 (EOS), R81.10 (EOS), R81.20

Last Modified

2023-07-30

Symptoms

• In large Multi-Domain environments, login to SmartConsole may fail while High Availability sync is running.
• $MDS_FWDIR/log/cpm.elg will have many log prints with:

alignMirrorsOfDomain: Starting alignment for domain

And

alignMirrorsOfDomain done for domain

Solution

This problem was fixed. The fix is included in:

• Jumbo Hotfix Accumulator for R81.20 starting from Take 14
• Jumbo Hotfix Accumulator for R81.10 starting from Take 110
• Jumbo Hotfix Accumulator for R81 starting from Take 87
• Jumbo Hotfix Accumulator for R80.40 starting from Take 198

If you choose not to upgrade, Check Point can supply a Hotfix. Contact Check Point Support to get a Hotfix for this issue.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.

For faster resolution and verification, please collect CPinfo files from the Security Management Server and Security Gateways involved in the case.

Hotfix installation instructions:

Refer to sk168597 - How to install a Hotfix.

After the fix is installed, the relevant environment variable must be enabled.

If the issue is on the active server, use SKIP_ALIGN_MIRRORS_ON_SOURCE_MACHINE

If the issue is on the standby server, use SKIP_ALIGN_MIRRORS_ON_TARGET_MACHINE

Use the variable chosen for the commands below.

To enable:

• On-the-fly:

[Expert@HostName]# $MDS_FWDIR/scripts/reload_env_vars.sh -e SKIP_ALIGN_MIRRORS_ON_TARGET_MACHINE=1

• Permanently:

[Expert@HostName]# $MDS_FWDIR/scripts/override_server_settings.sh -e SKIP_ALIGN_MIRRORS_ON_TARGET_MACHINE 1

To disable:

• On-the-fly:

$MDS_FWDIR/scripts/reload_env_vars.sh -u SKIP_ALIGN_MIRRORS_ON_TARGET_MACHINE

• Permanently:

1. Back up the current $MDS_FWDIR/conf/cpmEnvVars.conf file:

[Expert@HostName]# cp -pv $MDS_FWDIR/conf/cpmEnvVars.conf{,_BKP}

2. Edit the current $MDS_FWDIR/conf/cpmEnvVars.conf file:

[Expert@HostName]# vi $MDS_FWDIR/conf/cpmEnvVars.conf

3. Remove this line:

SKIP_ALIGN_MIRRORS_ON_TARGET_MACHINE=1;export SKIP_ALIGN_MIRRORS_ON_TARGET_MACHINE

4. Save the changes in the file and exit the Vi editor.

NOTE

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Article Properties

Access Level: General
Status: Approved by TAC
Date Created: 2023-04-14
Last Modified: 2023-07-30