Support Center > Search Results > SecureKnowledge Details

Search Support Center

"An internal error has occurred. (Code: 0x8003001D, Could not access file for write operation)" when
saving a change in SmartConsole

Rate This My Favorites

Solution ID sk119973

Technical Level

Product SmartConsole, Quantum Security Management, IPSec VPN

Version R80.10 (EOL), R80.20, R80.30
OS Gaia
Date Created 15-Aug-2017
Last Modified 01-Jun-2020

Symptoms
"An internal error has occurred. (Code: 0x8003001D, Could not access file for write operation)" when saving a change in SmartConsole.

Solution
Scenario 1 - Issue with Geo Policy after upgrading the Security Management Server

Additional Symptoms:

The following error message is displayed in SmartConsole after making changes in the object and clicking on OK:
Failed to save object <Name_of_Object>
Server error is: An internal error has occurred. (Code: 0x8003001D, Could not access file for write operation)
Please contact technical support

$FWDIR/log/cpm.elg file on Security Management Server shows the following exception:

Expected single result for object with uid XXX-XXX-XXX-XXX-XXX, got: 0"
from class org.springframework.dao.DataIntegrityViolationException

Show / Hide solution

Cause: 'Default Geo Policy' object was deleted.

Solution:

Check Point offers special script to resolve this issue.

1. Contact Check Point Support to get this script.

A Support Engineer will have to verify that the script is relavent to the issue you are experiencing before providing it. For faster resolution and verification pleas
Security Management Server involved in this case:

CPinfo
$FWDIR/log/cpm.elg*
migrate export

2. Backup the Security Management / Multi-DomainServer.

3. Transfer the TAR-ball with the script (add_default_geo_policy.tar) to the Security Management Server (into some directory, e.g., /some_path_to_fix/).

4. Connect to the command line on the Security Management Server.

5. Log in to the Expert mode.

6. Go to the directory, in which you put the TAR-ball with the script.

[Expert@HostName:0]# cd /some_path_to_fix/

7. Unpack the script:

[Expert@HostName:0]# tar -xvf add_default_geo_policy.tar

8. Assign the required permissions:

[Expert@HostName:0]# chmod -v +x add_default_geo_policy.groovy

 9. Move the script to $MDS_FWDIR/scripts:

[Expert@HostName]# mv add_default_geo_policy.groovy $MDS_FWDIR/scripts

10. Close all SmartConsole windows. Verify by running the "cpstat mg" command on Security Management Server.

11. Execute the script to add the 'Default Geo Policy' object:
Note: Change the username and password in the command to your SmartConsole credentials.

[Expert@HostName:0]# USERNAME=admin PASSWORD=vpn123 $MDS_FWDIR/scripts/run_groovy_script.sh

$MDS_FWDIR/scripts/add_default_geo_policy.groovy

Note: You can see the script's output log in the $MDS_FWDIR/log/cpm.elg file.

12. Restart Check Point services:

[Expert@HostName:0]# cpstop
[Expert@HostName:0]# cpstart

13. Connect with SmartConsole to Security Management / Multi-Domain Server.

14. Try to create / modify an object.

Scenario 2 - Issue with Legacy SmartDashboard

Additional Symptoms:

When using Legacy SmartDashboard to modify the IKE encryption settings of an External User Profile, making change and closing the External User Profile win
seconds and then shows:

An internal error has occurred.

Code: 0x8003001D, Could not access file for write operation.

The CPM.elg file shows:

DATE TIME,PID INFO dle.triggers.CpmiSpecificUsercIkeIntUpdateTrigger [qtp-1391824701-15056]: CpmiSpecificUsercIkeIntUpdateTrigge
DATE TIME,PID INFO dle.triggers.CpmiSpecificUsercIkeIntUpdateTrigger [qtp-1391824701-15056]: SharedSecret has been changed
DATE TIME,PID INFO dle.triggers.CpmiSpecificUsercIkeIntUpdateTrigger [qtp-1391824701-15056]: before obscureSecret
...
DATE TIME,PID ERROR management.utils.PasswordUtils [qtp-1391824701-15056]: patchCode service failed Unable to connect to server.
Please make sure that the server is up and running.
The FWM.elg file shows:
[FWM ...]@Host[DATE TIME] hash_drbg_add_sample: Adding 4 bytes worth 400 milibits. Total: 167200. Required: 0
[FWM ...]@Host[DATE TIME] Calling Web Service:
/opt/CPsuite-
R80.30/fw1/lib/libngmws.so(_ZN3ngm35FwmSvcRemoteServiceSoapBindingProxy14updateMultipleEPKcS2_PNS_19fwm__updateMultipleEPNS_27fw
[0xf563c02f]
/opt/CPsuite-R80.30/fw1/lib/libCPMIServerTables.so(_ZN26CCkpDbObjectsCWsRemoteImpl5WriteEb+0x238) [0xeea92f18]
/opt/CPsuite-R80.30/fw1/lib/libCPMIServerTables.so(_ZN26CCkpDbObjectsCWsRemoteImpl6updateEP5fwsetPb+0xde) [0xeea91a2e]
...
fwm(fwm_cpmi_command_handler+0xd40) [0x814d940]
fwm(cpmi_gen_handler+0x147) [0x814df57]
/opt/CPshrd-R80.30/lib/libopsec.so(cpmi_server_demultiplex_datagram+0x2c6) [0xf47c4db6]
/opt/CPshrd-R80.30/lib/libopsec.so(opsec_demultiplex_datagram+0x1298) [0xf4787d58]
/opt/CPshrd-R80.30/lib/libopsec.so(opsec_fwasync_conn_handler+0xa7) [0xf478b697]
/opt/CPshrd-R80.30/lib/libComUtils.so(fwasync_do_mux_in+0xa60) [0xf3b22ed0]
/opt/CPshrd-R80.30/lib/libComUtils.so(+0x1a395) [0xf3b23395]
/opt/CPshrd-R80.30/lib/libComUtils.so(T_event_mainloop_iter+0x164) [0xf3b19104]
/opt/CPshrd-R80.30/lib/libComUtils.so(T_event_mainloop_e+0x48) [0xf3b194f8]

Show / Hide solution

Solution:

This problem was fixed. The fix is included in:

Jumbo Hotfix Accumulator for R80.30 since Take 195

Jumbo Hotfix Accumulator for R80.20 since Take 160

If you choose not to upgrade, Check Point can supply a Hotfix. Contact Check Point Support to get a Hotfix for this issue.
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.
For faster resolution and verification, please collect CPinfo files from the Security Management Server and Security Gateways involved in the case.
Scenario 3 - Permission issue

Additional Symptoms:

The following error message is displayed in SmartConsole after making changes in the object and clicking on OK:
"error has occurred. (Code: 0x8003001D, Could not access file for write operation) Please contact technical support. ""
The current changes to object parameters are invalid and therefore will be discarded.
Unable to change firmware version.

Show / Hide solution

Cause: Logged in user does not have required permission.

Solution:

To fix the issue, give the required permission to the correct profile.

Alternatively, as a workaround perform the activity with "admin" user id.

Applies To:
PMTR-35367 , PRHF-3128,
This sk replaces: sk149852, sk163173

Give us Feedback Please rate this document [1=Worst,5=Best]

Enter your comment here

Comment

SECURE YOUR EVERYTHING ™

©1994-2022 Check Point Software Technologies Ltd. All rights reserved.

Copyright | Privacy Policy