topic Re: how-to add an access rule with legacy user access objects? in API / CLI Discussion

how-to add an access rule with legacy user access objects?

PedroViegas — Fri, 02 Feb 2018 23:29:21 GMT

Hi guys, is it currently possible to add an access rule with legacy user access objects like an LDAP group?

in the API of add-access-rule i cant find the option,

https://sc1.checkpoint.com/documents/latest/APIs/index.html?#web/add-access-rule~v1.1

If not, is there any plans to add this?

Added a prinscreen of a rule as example.

Thanks!

Pedro Viegas

Re: how-to add an access rule with legacy user access objects?

Ron_Izraeli — Sat, 03 Feb 2018 21:48:36 GMT

Could add-access-role do the trick?

Re: how-to add an access rule with legacy user access objects?

PedroViegas — Mon, 05 Feb 2018 11:07:33 GMT

Hi Ron,

That's not exactly what i need. I need to create a new LDAP group (not an access role) and then add that LDAP group to an access rule ("add new Legacy User at Location).

Check the printscreen below, in red is what i want to do via script. In green is how to do it in the UI. Hope its more clear

Re: how-to add an access rule with legacy user access objects?

Robert_Decker — Mon, 05 Feb 2018 13:13:18 GMT

Hi Pedro,

The current version of Management API doesn't support LDAP objects.

Your task may be accomplished by using the dbedit API.

Robert.