Re: [FW1] FW 4.0 reinstall problems ...

[Boyd Nation <boyd@Emss.Com>]

Sorry about the blank first try; I got knocked offline and my email client
guessed wrong about what to do.

> hostname# fw load policy.W hostname
> policy.W: Security Policy Script generated into policy.pf
> policy:
> "/etc/fw/lib/base.def", line 436: ERROR: cannot find
> <PMAP_CONNECT_TIMEOUT> anywhere
> "/etc/fw/lib/base.def", line 473: ERROR: unknown macro or function
> <rpc_insession>
> "/etc/fw/lib/auth.def", line 35: ERROR: unknown macro or function
> <rpc_insession>
> "/etc/fw/lib/auth.def", line 37: ERROR: syntax error
> "/etc/fw/lib/auth.def", line 37: ERROR: table <client_auth> has no
> predefined format
> "/etc/fw/lib/auth.def", line 44: ERROR: unknown macro or function
> <PASS_CLNTAUTH_SPECIFIC>
> "/etc/fw/lib/auth.def", line 51: ERROR: syntax error
> "/etc/fw/lib/auth.def", line 52: ERROR: table <client_auth> has no
> predefined format
> "/etc/fw/lib/auth.def", line 57: ERROR: table <check_alive> has no
> predefined format
> "/etc/fw/lib/auth.def", line 76: ERROR: unknown macro or function
> <rpc_insession>
> "/etc/fw/lib/auth.def", line 83: ERROR: unknown macro or function
> <CHECK_CLNTAUTH_SPECIFIC>
> Compilation Failed.
> -snip-

I ran into this one earlier today, oddly enough.  The problem appears to be
based on the fact that there are attributes defined in the older objects.C
file which are not defined under the later version -- poor design on 
Checkpoint's part, but there you go.  Here's the solution that worked for
me:

fwstop
mkdir tmp
Copy empty original objects.C file from currently-installed version to 
	tmp/obj1.C.
Copy old objects.C file to tmp/obj2.C.
cd tmp
fw confmerge obj1.C obj2.C > objects.C
Copy tmp/objects.C to $FWDIR/conf.
cd $FWDIR/conf
fwm -g *.W
fwstart

-- 
Boyd Nation         Energy Management Systems Services     Southern Company
boyd@emss.com                 (205) 257-5789            FAX: (205) 257-3689


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================