topic Re: How to Create Multiple Admin Accounts in Firewall and Security Management

How to Create Multiple Admin Accounts

HoogliBoogli — Tue, 15 Oct 2019 05:58:36 GMT

Hi,

how can I create multiple Admin-Acounts wit GAIA Clish. To Create one account, I can write this commands in clish

add user [User] uid [number] homedir /home/user
set user [User] password
save config‍‍‍‍‍‍‍‍‍‍‍‍‍‍

and so on...

for out installation I don´t want set up all admin user manual on out checkpoint Appliances. We use GAIA R80.10.

What can I do? API? User-File?

Thanks for help.

Re: How to Create Multiple Admin Accounts

PhoneBoy — Wed, 16 Oct 2019 00:05:21 GMT

Why not script it all beforehand?
If you know the passwords for the users, you can get the hash for them and set the hashes non-interactively (e.g. set user user1 password-hash hash-value).
I believe such a script can be loaded as part of ISOmorphic, CDT, or other methods.

Re: How to Create Multiple Admin Accounts

HoogliBoogli — Wed, 16 Oct 2019 08:42:08 GMT

yes I can script it. I will create all user over the WebUi and than I will export the file. I think, it is better than a individual script.

Re: How to Create Multiple Admin Accounts

Maarten_Sjouw — Wed, 16 Oct 2019 11:32:30 GMT

If you have a spreadsheet with names, ID and PW hashes you can make your own command set:
column 1 has Name, column B has ID and column C has PW-Hash
create this formula in D2 (the first data line) ="add user "&A2&" uid "&B2&" homedir /home/"&A2" <Alt> <Enter> set user "&A2&" password-hash "&C2&" <Alt> <Enter> add rba user "&A2&" roles adminRole

Replace the <Alt><Enter> with the key combination.
If needed you can change the adminRole to another or use another field to set the correct value.
Just make a copy of the column and paste it into a text editor, now you can copy and paste parts into a Putty session to the Gaia clish interface.

Re: How to Create Multiple Admin Accounts

HoogliBoogli — Wed, 16 Oct 2019 11:52:29 GMT

Hi Maarten,

thanks for this example - I will try it, it seems simple.