> Source: [sk115221](https://support.checkpoint.com/results/sk/sk115221)

# sk115221 - Newly configured user (with UID that is not 0) is not able to log in from Gaia Clish to Expert mode on VSX Gateway

| Property | Value |
|----------|-------|
| Solution ID | sk115221 |
| Date Created | 2016-12-26 |
| Last Modified | 2024-05-01 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * Newly configured user (with UID that is not 0) is not able to log in from Gaia Clish to Expert mode on VSX Gateway:

  1. Create a new user in Gaia Clish with UID that is not 0 and with default shell */etc/cli.sh*.

     *Example* :  
     `
     HostName:0> set user Test uid 106 homedir /home/test`  
     `
     HostName:0> set user Test password ***`  
     `
     HostName:0> add rba user Test roles adminRole`  
     `
     HostName:0> set user Test shell /etc/cli.sh`  
     `
     HostName:0> save config 
     `
  2. Connect to Gaia OS over SSH / console and log in with the newly configured user.

  3. Set an Expert mode password:

     `HostName:0> set expert-password`  
     `
     ... ...`  
     `
     HostName:0> save config`
  4. Log in from Gaia Clish to Expert mode:

     `HostName:0> expert`
  5. The expected default message is displayed, but the shell does *not* change from Gaia Clish to Expert mode::

     `
     Warning! All configuration should be done through clish`  
     ` 
     You are in expert mode now.`  
     `
     `  
     `
     HostName:0>
     `
* */var/log/messages* file shows the following messages:

  `
  HostName clish[`*PID1* `]: cmd by mnemonic: Start executing : expert (cmd md5: ...)`  
  `
  HostName clish[`*PID1* `]: cmd by mnemonic: Processing : expert (cmd md5: ...)`  
  `
  HostName clish[`*PID2* `]: CliExec_moreargs: INSTANCE_VSID is 0`  
  `
  HostName clish[`*PID2*`]: Failure setting current vrfid. vrfid is 0.
  `
* The above issue does not occur if before logging in from Gaia Clish to Expert mode, the VSX Mode is disabled:  

  `HostName:0> set vsx off`

* The above issue does not occur if a new user is created with UID 0.

* The above issue does not occur if the default shell for the newly configured user is set to */bin/bash*.

## Cause

Gaia Clish fails to switch from the context of VS0 to the same context of VS0.  

When Clish invokes Expert mode, it should switch the namespace/context to the current one. This action invokes a system call in the kernel.  
Switching a context in the kernel requires a particular capability (CAP_SYS_ADMIN). A user without admin permissions cannot perform the namespace switch in the kernel.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content