topic Re: User Object Export in API / CLI Discussion

User Object Export

Nanda — Wed, 30 Jun 2021 05:33:00 GMT

Hi,

Is it possible to export from the local user database from one management server and import it to another management server on R80.40

Re: User Object Export

the_rock — Wed, 30 Jun 2021 09:27:37 GMT

Sadly, I dont believe you can fo that, but maybe someone else can confirm. There might be a way to do it from API, but not sure.

Re: User Object Export

Timothy_Hall — Wed, 30 Jun 2021 13:41:16 GMT

The command to do this used to be fwm dbexport but it is not supported in R80+. Try Phoneboy's dbedit workaround he mentioned here:

https://community.checkpoint.com/t5/Management/fwmbin-cmain-Failed-to-convert-database/td-p/5438

Also starting in API 1.6.1+ there is the show users detail-level full command, but I don't think it will display the password.

Re: User Object Export

PhoneBoy — Wed, 30 Jun 2021 15:02:40 GMT

The API output for v1.6.1/1.7 is probably easier to work with in general (and has formally supported APIs).
However, you are correct in that the output does not include the internal password hash.
Definitely an RFE @Omer_Kleinstern.

The only way to output the password hash currently is via dbedit, as described in the thread.

Re: User Object Export

Bob_Zimmerman — Wed, 07 Jul 2021 17:25:47 GMT

Also worth noting: users and administrators are totally separate object types. The `show users` shows user objects. These can be used to log in to a remote access VPN and the like, but cannot be used to log in to SmartConsole. This can be a big source of confusion for a lot of people not already familiar with Check Point.

There is a separate `show administrators` API command, which I believe has been there since APIv1.0 with R80.

Edit: I just realized 'show administrators' only works on an MDS. There does not appear to be a way to view the administrators on a normal SmartCenter via the API.

Re: User Object Export

Nanda — Thu, 01 Jul 2021 10:16:42 GMT

Hi,

Thanks for the update let me check the same and revert

Re: User Object Export

Nanda — Thu, 01 Jul 2021 10:17:10 GMT

Hi Timothy,

Thanks for the update let me try the same