topic Re: Create a Cpmi User with Checkpoint API in API / CLI Discussion

Create a Cpmi User with Checkpoint API

mervin16 — Sun, 01 Nov 2020 06:12:33 GMT

Hello,

I am trying to create a CPMI user from the Checkpoint API using postman.

I didn't find anything on the documentation for CPMI User and CPMI User groups but i could find something about generic-objects on forums. When i search for generic-objects on the documentation, i still don't find it.

I tried something like this with generic-object to create a user:

https://{{sms_ip}}/{{base_url}}/add-generic-object { "name": "jdoe", "create": "com.checkpoint.objects.classes.dummy.CpmiUser", "authMethod": "INTERNAL_PASSWORD", "internalPassword": "jdoe1" }

The user is created but when i try to log in on the Check Point portal, it doesn't work. It has authentication errors.

However, if i create the same username and password manually on the SMS, it works.

Any idea why on the API it's not working ? Am i doing something wrong ?

Re: Create a Cpmi User with Checkpoint API

funkylicious — Sun, 01 Nov 2020 07:39:50 GMT

I think add-generic-object it's a deprecated call, since I can only find related things for it in v1/1.1 of the API.

Did you publish after adding it ?

What API version are you running on your SMS ?

Re: Create a Cpmi User with Checkpoint API

PhoneBoy — Mon, 02 Nov 2020 05:50:32 GMT

There are formal API calls for this in the latest R80.30/R80.40 JHF as well as R81.
See: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/changelog~v1.6.1

If you don't want to upgrade, have a look at this thread, which explains how to do it: https://community.checkpoint.com/t5/API-CLI-Discussion-and-Samples/Add-new-user-and-assign-to-an-existing-group-using-the-generic/m-p/39687

Re: Create a Cpmi User with Checkpoint API

PhoneBoy — Sun, 01 Nov 2020 20:54:51 GMT

generic-object calls are not deprecated per-se, but they are not formally documented or supported.
generic-object calls can be used in a handful of situations where a formal API does not exist.

Re: Create a Cpmi User with Checkpoint API

mervin16 — Mon, 02 Nov 2020 09:56:23 GMT

Thank you so much! I've been looking for this for a while now. Appreciate the help.