topic Re: Add users with mgmt_cli in Firewall and Security Management

Add users with mgmt_cli

Peter_Kjolner — Wed, 20 Dec 2017 16:09:50 GMT

I need to add hundreds of regular users (not Access Roles or administrators) for VPN access to the database and am trying to find a way to automate the task. They also need to be assigned a specific Authentication method (Securid).
I was hoping to use mgmt_cli and a csv file to run a batch, but so far I've only seen how to add other objects, not users. Is this even possible?

LDAP is not an option, this is for a transition between LDAP and Radius.

Re: Add users with mgmt_cli

masher — Wed, 20 Dec 2017 19:28:46 GMT

I'm not aware of a command (add-users, for example) that uses the R80 API for adding anything other than Administrators.

It is still possible to use dbedit on the management server to add these users from the CLI.

If you were to place your user ids in a single file, then you could script the addition of all x hundred users in one go. What I have below doesn't account for any comments, etc., but additional properties are available ("dbedit -local print users <username>") and can be used as needed.

# create a list of commands for dbedit to process
for i in `cat userlist`
do
  echo "create user ${i}" >> newusers
  echo "modify users ${i} auth_method SecurID" >> newusers
done

# This will have dbedit save the changes.
echo "update_all" >> newusers

# Use the newly created newusers file 
dbedit -local -f newusers

Re: Add users with mgmt_cli

Robert_Decker — Fri, 21 Jun 2019 09:08:32 GMT

See the answer here -

https://community.checkpoint.com/message/10883-users-via-api

Use Michael's suggestion meanwhile.

Robert.