topic Re: Problems Removing Commit Locks in General Topics

Problems Removing Commit Locks

NeilDaniels — Mon, 20 Feb 2017 19:55:47 GMT

Our Panorama is running PANOS v7.1.6 and is configured to "Automatically Acquire Commit Lock". We have several firewall system administrators. If anyone of us makes a change, a commit lock is automatically taken for the user who makes the change. Two questions:

1.) If I make a change, a commit lock appears for me. If another administrator makes a change, a commit lock appears for him. If I attempt to remove my commit lock so that the other administrator can apply my changes and his, I encounter the message at the bottom until logging out of the Panorama GUI and then logging back in. Is this normal behavior?

2.) If one administrator takes a commit lock, it does not appear that any other administrator can remove that commit lock. How do you go about removing a commit lock that was created by another administrator? If he makes a change, forgets, and then leaves for vacation, how can I remove his commit lock? Surely there must be some type of override.

This is the message I encounter when attempting to remove my own automatic commit lock or the commit lock of another administrator:

Remove lock

Commit lock is not currently held by [AdminUsername]

[Close]

Thanks!

Re: Problems Removing Commit Locks

BenjAudy.MTL — Mon, 20 Feb 2017 20:38:41 GMT

For question #2, any superuser should be able to remove a lock added by any user. I cannot answer your first question as we don't use automatic locks.

Regards,

Benjamin

Re: Problems Removing Commit Locks

BPry — Mon, 20 Feb 2017 20:40:45 GMT

2) Someone in your org should be a 'superuser' or you should have a superuser registered to the device and know what the password is. Only a superuser can remove admins commit locks.

1) I'm not sure if that is the intended behavior; are you sure that you are just trying to remove your commit lock and not trying to remove all of them on accident. If it continues to happen it might be worth talking to TAC and seeing if they have a solution for you.

Re: Problems Removing Commit Locks

NeilDaniels — Mon, 20 Feb 2017 21:16:00 GMT

Thank you both for the responses. Just checked... Both system administrators (myself and my coworker) are superusers. Can a superuser not remove the lock of another superuser?