topic Re: PAN 5060 7.1.11 HA Election Settings Frozen in Web UI in General Topics

PAN 5060 7.1.11 HA Election Settings Frozen in Web UI

LesSmith — Wed, 12 Jul 2017 00:40:37 GMT

I experienced an issue when using the UI in 7.1.11 on a PAN 5060

I disabled "Preemptive" in the "Elections Settings" area of the "Device -> High Availability -> General" page in 7.1.10. It has a template from Panorama, so the change is saved as an override.

I upgraded to 7.1.11. When I tried to enable "Preemptive", by reverting the override, the UI freezes. If I reload the page, the change is not recorded.

But if I delete the setting from the CLI, then run a commit from the UI, the setting is restored. But any attempt to edit is causes the UI to freeze.

(active)> configure
Entering configuration mode
[edit]
(active)# delete deviceconfig high-availability group 1 election-option preemptive

[edit]
(active)# exit
Exiting configuration mode

Re: PAN 5060 7.1.11 HA Election Settings Frozen in Web UI

abjain — Wed, 12 Jul 2017 01:23:33 GMT

Hi,

Could you enable debug on GUI:

https://<ip-address>/debug

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Run-a-PAN-OS-Web-UI-Debug/ta-p/58117

Then do the changes you are talking about from GUI, and then refresh the debugs.

If the debugs dont give much idea, please open a case with TAC. This may be a software issue they can help take a look into.

Re: PAN 5060 7.1.11 HA Election Settings Frozen in Web UI

LesSmith — Wed, 19 Jul 2017 07:15:28 GMT

Yes, I get a PHP Fatal error

[19-Jul-2017 07:13:24 UTC] PHP Fatal error:  Call to a member function asXML() on a non-object in /var/appweb/htdocs/php/device/ha/HAElection.php on line 124

Re: PAN 5060 7.1.11 HA Election Settings Frozen in Web UI

BPry — Wed, 19 Jul 2017 15:18:50 GMT

@LesSmith

It looks like your HAElection is corrupt. I would recommend that you try reinstalling 7.1.11 and see if that fixes your issue; it sounds like something didn't get unpacked correctly during your update.

Re: PAN 5060 7.1.11 HA Election Settings Frozen in Web UI

Remo — Wed, 19 Jul 2017 17:03:07 GMT

I had the same problem on an old 2020 ... this happened when I migrated the firewall from local to panorama management including HA settings ... but I did not think about this further ... used the CLI --> problem solved

I then also decided to do ALL HA configs only local because with panorama it is more a pain for HA settings than a help

Re: PAN 5060 7.1.11 HA Election Settings Frozen in Web UI

BPry — Wed, 19 Jul 2017 17:56:37 GMT

Alas the CLI is working because you aren't relying on the PHP script as stated in the error.

/var/appweb/htdocs/php/device/ha/HAElection.php

It really depends on how bad you want this to work. A reinstall of the OS should get this to work correctly, or just use the CLI as you did previously in your first post. My personal choice would be the CLI path but I don't do a lot of configuration work in the GUI so that's a natural progression for me, but I also don't have to worry about another admin working on my devices.

Re: PAN 5060 7.1.11 HA Election Settings Frozen in Web UI

Remo — Wed, 19 Jul 2017 18:15:41 GMT

The issue was only present when there are values in a panorama template. After I removed the template values it is possible again to configure all HA settings on the local device.

My personal advice in addition to @BPry's is: configure HA settings only locally

Re: PAN 5060 7.1.11 HA Election Settings Frozen in Web UI

BPry — Wed, 19 Jul 2017 18:19:11 GMT

@Remo,

Interesting. I wonder if including a value in a panorama template removes the member object in the config file that the .php script is trying to target?

Re: PAN 5060 7.1.11 HA Election Settings Frozen in Web UI

Remo — Wed, 19 Jul 2017 18:55:18 GMT

@BPry

Could be ... I don't know ... for me the issue was not important enough (workaround was too simple), to open a case and spend more time into this one

Re: PAN 5060 7.1.11 HA Election Settings Frozen in Web UI

LesSmith — Thu, 20 Jul 2017 00:51:01 GMT

Reinstall did not work 😞

Also this happened on all four of my Palo 5060's.

les

Re: PAN 5060 7.1.11 HA Election Settings Frozen in Web UI

abjain — Fri, 28 Jul 2017 01:58:49 GMT

I see a similar issue in the database and looks like its addresses in 8.0. Is it possible to give 8.0.X a try?

I woul suggest to open a TAC case so that they can help investigate more and if applicable request a backport in 7.1