> Source: [sk168032](https://support.checkpoint.com/results/sk/sk168032)

# sk168032 - "The gateway may fail to authenticate these users from Access Role" warning during policy installation

| Property | Value |
|----------|-------|
| Solution ID | sk168032 |
| Date Created | 2020-07-14 |
| Last Modified | 2022-01-29 |
| Technical Level | General |
| Products | Security Gateway, SmartConsole |
| Versions | R81.10 (EOS), R81 (EOS), R81.10 (EOS), R81 (EOS) |

## Symptoms

- * The user encounters one or more of the following policy installation warnings:  
  `
  "Rule X: The gateway may fail to authenticate these users from Access Role `: []", since their password is longer than 8 characters. Support for passwords longer than 8 characters is only with a specific Jumbo. For more details, or to stop this warning from showing again, see sk168032.

* Admin encounters the following warning when internal users password is set:  
  `

  "The user password length is more than 8 characters. Make sure that the password is 8 characters or less. If not, Gateway versions before R81 might fail to authenticate this user. For more details see sk168032".`

## Cause

Internal users with long passwords (longer than 8 characters) may fail to authenticate on the Security Gateway in various portals.

SmartConsole shows these messages when an Access Control rule meets one of these conditions:

* An Access Role (in the **Source** or **Destination** column) is configured to match all identified users/groups.

  Example:

  ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk168032/all_ID-AR202007141202003.png)
* An Access Role (in the **Source** or **Destination** column) is configured to match specific users/groups.

  Example:

  ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk168032/specific-group-AR202007141430031.png)
* A specific "User-Group@Location" is selected in the **Source** or **Destination** column.

  Example:

  ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk168032/userAtLocation202007141431522.png)

## Solution

Management Servers and Security Gateways R81 and higher include the support for long passwords for internal users.

If you wish to prevent this warning during each policy installation on a Management Server R80.40 and lower:

1. Connect to the command line on the Management Server.

2. Log in to the Expert mode.

3. Get the basic information for the Global Properties object:

   **Note** - This is a single long command.
   * On a Security Management Server, run:

     **`mgmt_cli show-generic-objects class-name com.checkpoint.objects.classes.dummy.CpmiFirewallProperties`**
   * On a Multi-Domain Security Management Server, run (specify the name of the applicable Domain):

     **`mgmt_cli show-generic-objects class-name com.checkpoint.objects.classes.dummy.CpmiFirewallProperties -d <Name of Domain>`**
4. Enter the administrator credentials.

5. In the output, copy the value from the "**uid**" line.

   Example output:

   ```
   ... ... ...
   from: 1
   to: 1
   total: 1
   objects:
   - uid: "610c8966-8b40-42cf-86f3-522912aacd26"
     name: "firewall_properties"
     type: "CpmiFirewallProperties"
     domain:
       uid: "41e821a0-3720-11e3-aa6e-0800200c9fde"
       name: "SMC User"
       domain-type: "domain"
   ```

6. Configure the Management Server **not** to show this warning.

   Run:

   **`mgmt_cli set-generic-object uid "UID Value you copied in the previous step" skipPbkdf2InternalPasswordWarnings true`**
   > **Note** - To configure the Management Server to show this warning again, run this command with the value "`false`" at the end:
   >
   > **`mgmt_cli set-generic-object uid "UID Value you copied in the previous step" skipPbkdf2InternalPasswordWarnings false`**

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content