> Source: [sk113158](https://support.checkpoint.com/results/sk/sk113158)

# sk113158 - "Failed fetching Server DN" error on Tufin server connection test failure

| Property | Value |
|----------|-------|
| Solution ID | sk113158 |
| Date Created | 2016-09-19 |
| Last Modified | 2016-09-20 |
| Technical Level | General |
| Products | Security Management Server |
| Versions | R82.10, R82, R81.20, R82.x, R82.20 |

## Symptoms

- * Tufin server fails connection test with "Failed fetching Server Dn" when connecting to Check Point log device.  

* FWD debug shows:

  *\[FWD ...\]@Host\[DATE TIME\]\[\] spawn_fd_to_another_process: Getting LEA Non Auth request.* *\[FWD ...\]@Host\[DATE TIME\]\[\] spawn_fd_to_another_process: connection params: \<IP address,18184\> -\> \<IP address,39523\>* *\[FWD ...\]@Host\[DATE TIME\]\[\] spawn_fd_to_another_process: father process. close fd 70*

## Cause

Tufin server is configured to establish an OPSEC LEA connection via port 18184 on the Tufin side, but *fwopsec.conf* file is configured as*lea_server* port 18184, not the corrected *lea_server auth_port* 18184.

## Solution

Configure Tufin to use a non-auth connection attempt when */opt/CPmds-R77/customers/\<Customer\>/CPsuite-R7X.XX/fw1/conf/fwopsec.conf* shows:

*lea_server auth_port 0*

*lea_server port 18184*

OR

Configure the Security Management server to accept auth connections over port 18184 (as configured on Tufin) in */opt/CPmds-R77/customers/\<Customer\>/CPsuite-R7X.XX/fw1/conf/fwopsec.conf:*

*lea_server auth_port 18185*

*lea_server port 18184*

**Note:** It is only possible to have a single auth connection configured and used.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content