topic Re: Changing a smartconsole user password with an API call in API / CLI Discussion

Changing a smartconsole user password with an API call

bob111 — Tue, 01 Apr 2025 09:19:38 GMT

Hello all, I want to change a smartconsole user password via the API, in the docs there is set-user, but the users it refers to are the users in the Users object and the smartconsole users. Does anyone know if there is something else?
Thanks

Re: Changing a smartconsole user password with an API call

Amir_Senn — Tue, 01 Apr 2025 09:28:08 GMT

Hi Bob,

Try using "set administrator"

You can follow reference using in this link: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/set-administrator~v2%20

Re: Changing a smartconsole user password with an API call

bob111 — Tue, 01 Apr 2025 09:41:26 GMT

Thanks for the reply!
But this is a command executed in the cli no? Can it be done with an http request?
Also when I tried this command it gave me that it can only work on domains of type MDS. we do not use domains, can we still use the command?

Re: Changing a smartconsole user password with an API call

Tal_Paz-Fridman — Tue, 01 Apr 2025 09:49:52 GMT

All Management API commands have several options:

mgmt_cli tool
Web Services
SmartConsole CLI
Gaia CLI

In this case:

https://sc1.checkpoint.com/documents/latest/APIs/index.html#web/set-administrator~v2%20

It can also be used in MDS - there are examples at the bottom of the page

Re: Changing a smartconsole user password with an API call

bob111 — Tue, 01 Apr 2025 10:00:30 GMT

I get the error: This command can work only on domains of type MDS. Cannot execute it in current domain (current domain type is Domain)

Re: Changing a smartconsole user password with an API call

Daniel_Kuhl1 — Tue, 01 Apr 2025 10:44:02 GMT

Hi @bob111 ,

to be honest it's a little bit confusing, but the documentation says: "This command is available only after logging in to the System Data domain."

So you need to use the "login-to-domain" API call to gather the session-id even if you have a SMS:

curl --location 'https://<your-server>/web_api/login' \ --header 'Content-Type: application/json' \ --data '{ "user" : "<your-username>", "password" : "<your-password>", "domain" : "System Data" }'

...and then "set-administrator" to change the password:

curl --location 'https://<your-server>/web_api/set-administrator' \ --header 'Content-Type: application/json' \ --header 'X-chkp-sid: <your-session-id>' \ --data '{ "name" : "<your-username>", "password" : "<new-password>" }'

That worked for me. Let us know if it worked for you.

Re: Changing a smartconsole user password with an API call

bob111 — Tue, 01 Apr 2025 11:21:27 GMT

Thank you very much! It worked! I did not notice that you need to specify the domain on the login:)

Re: Changing a smartconsole user password with an API call

bob111 — Tue, 01 Apr 2025 11:58:14 GMT

I tried doing set-administrator without publishing by accident and I did not get an error but it locked the user I was trying to edit so I tried just publishing and it tells me that it cannot do it because other sessions are in progress and when I log in to the smartconsole I do not see any other sessions, do you why is that?

Re: Changing a smartconsole user password with an API call

Daniel_Kuhl1 — Tue, 01 Apr 2025 12:11:51 GMT

I guess your API session expired without publishing the changes. Maybe you can revert the changes back and do it again with a publish. 🙂

Re: Changing a smartconsole user password with an API call

bob111 — Wed, 09 Apr 2025 08:44:09 GMT

Is there to specify a domain when installing the policy after doing this change? because I did what you said and set-adminstrator command worked but when I try to publish and install the changes it says that it cannot find my policy, I assume this is because I am logged in to the System Data domain. How did you install the changes?
Thanks.

Re: Changing a smartconsole user password with an API call

Daniel_Kuhl1 — Wed, 09 Apr 2025 09:23:19 GMT

Hey @bob111, I haven't tested it but it should be fine to publish the changes to the management using your session ID. No policy install needed, just publish the changes and test if you can login to the Smart Console using the new password.

Re: Changing a smartconsole user password with an API call

bob111 — Wed, 09 Apr 2025 11:20:01 GMT

Thank you very much😅

Re: Changing a smartconsole user password with an API call

Daniel_Kuhl1 — Wed, 09 Apr 2025 11:35:39 GMT

You're welcome. This is the place to ask and get help. 😊