David/Tom, I the past I have had the same issues. I did get rid of them by doing a upgrade_export and upgrade_import on the Smartcenter. After the import I was able to delete the users I wanted to get rid off.
However: since today I have a similar issue, not with a user but a group (which is empty and unused). Doing the work around from you David and my own doesn't work this time. Removing the group results in an internal error [11]. Does anybody have a clue how this can be fixed?? David Callebaut Security Engineer Atos Euronext Market Solutions Avenue de Schiphollaan 6 BE-1140 Bruxelles/Brussel Belgium Tel. +32 (0) 2 702 55 49 Mobile. +32 (0) 478 98 08 41 Fax. +32 (0) 2 702 55 99 www.aemarketsolutions.com -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of David S. Barker Sent: maandag 17 oktober 2005 19:02 To: [email protected] Subject: Re: [FW-1] SPLAT - R55 - Secure Remote User Issue Tom, Sounds like you've got some corruption in the fwauth.ndb. Don't worry too much, you'll probably be able to fix it. If the user was deleted successfully, and you're still having errors do this. recreate the user with the same username. Verify that there are no objects associated with that user under the "location" tab. And then delete the user, remember to save and "install database" after each change, as we're trying to fix the corrupt entries. If that doesn't fix it, do this.. >From the management server run "fwm dbexport" Certain errors will be displayed on the screen. If there are any errors in the user database, you'll need to correct the objects that they reference. For example, if it says can't locate group_xyz, for user_abc, then you'll need to recreate group_xyz and try again. I've seen this happen before, especially, if you've got any users that use the "location" tab for restriction. The references to the objects you use there don't always stay up to date. So if you delete or rename one of the objects that happen to be referenced by a user object, the user database doesn't always reflect this change and you can have this corruption. David S. Barker Senior Security Engineer Compuquip Technologies Phone: 305.436.7272 X 1364 Fax: 305.436.9149 mailto://[EMAIL PROTECTED] 8399 NW 30th Terr, Miami, Fl 33122 Compuquip TECHNOLOGIES "Providing Solutions Since 1980" ________________________________ From: Mailing list for discussion of Firewall-1 on behalf of Tom Brown Sent: Mon 10/17/2005 11:39 AM To: [email protected] Subject: [FW-1] SPLAT - R55 - Secure Remote User Issue Hi Just removing a user from our secure remote user database as they have left. I remove the user as normal and then click 'yes' to the are you sure stuff and i get this Internal Error [11] while handling object 'username'. Failed to remove references of object 'username'. Please contact technical support Where 'username' is the username i'm trying to remove. This has not happenned before has anyone seen this? thanks ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
