topic Re: One Time Scripts on Gaia Embedded in Spark Firewall (SMB)

One Time Scripts on Gaia Embedded

Martin_Valenta — Fri, 16 Mar 2018 16:05:40 GMT

I would like to know, if CP is planning to provide same features "Script repository/One time scripts" available for GAIA gateway also on Gaia embedded applianicies. Currently you cannot rung any script from SmartConsole against Gaia embedded appliances, which is a little bit surprise to me. Is it on road map to add support or not?

Re: One Time Scripts on Gaia Embedded

PhoneBoy — Fri, 21 Jun 2019 09:21:57 GMT

I'm moving this to the https://community.checkpoint.com/community/infinity-general/smb-smp?sr=search&searchId=ff929676-e356-4762-812e-57f26a855542&searchIndex=0‌ space.

I suspect (though do not know for sure) the reason this isn't supported on the SMB appliances is because they do not have cprid, which is used for this purpose.

Re: One Time Scripts on Gaia Embedded

Martin_Valenta — Mon, 19 Mar 2018 02:58:33 GMT

Cprid works also on Gaia Embedded, i've used it for restoring admin access to box, after stucked firmware upgrade proces..

Re: One Time Scripts on Gaia Embedded

PhoneBoy — Mon, 19 Mar 2018 03:51:07 GMT

Ah, there's no separate cprid process.

Missed that

Re: One Time Scripts on Gaia Embedded

Martin_Valenta — Thu, 22 Mar 2018 03:36:41 GMT

Would be great is somebody from CP could give some feedback on it

Re: One Time Scripts on Gaia Embedded

G_W_Albrecht — Thu, 05 Jul 2018 08:17:30 GMT

Although it might be more simple to use one time scripts from Dashboard on SMB, there is a littele more complicated way to achieve the same using e.g. a GAiA device, see Perform scheduled scripted tasks on SMB devices.

On the other hand, you always can use WinSCP and CLI to run the script directly on the SMB device...

Re: One Time Scripts on Gaia Embedded

Pedro_Espindola — Fri, 06 Jul 2018 14:05:02 GMT

I know this won't replace what you need at all, but in case you don't know these features from SMB appliances:

You can use ZeroTouch to completely automate the deployment procedure.

With Reach My Device you can easily access the gateway even behind a NAT.

You lose in some places, but gain in others.

Re: One Time Scripts on Gaia Embedded

Martin_Valenta — Fri, 06 Jul 2018 14:45:13 GMT

Does One time script feature for Gaia OS, use CPRID, yes or no? I would bet that it use it. If yes, i don't see reason why same cannot be enabled for Gaia embedded.

Re: One Time Scripts on Gaia Embedded

PhoneBoy — Fri, 06 Jul 2018 17:20:03 GMT

Unless cprid on Gaia Embedded doesn't support executing arbitrary commands (which is possible).

Either way, it's not currently available from SmartConsole.

Re: One Time Scripts on Gaia Embedded

G_W_Albrecht — Fri, 24 Aug 2018 11:15:49 GMT

We found that cprid_util will work with centrally managed GAiA Embedded devices when taking care of environment variables, e.g.:

$CPDIR/bin/cprid_util -server <IP of SMB> -verbose rexec -rcmd /bin/bash -c "LOGNAME=admin bashUser on"

Without LOGNAME=admin, this will give the error: Current user cannot be determined

Re: One Time Scripts on Gaia Embedded

Martin_Valenta — Mon, 27 Aug 2018 07:51:38 GMT

$CPDIR/bin/cprid_util -server <IP of SMB> -verbose rexec -rcmd bash -c "more /etc/passwd"
this one works perfectly fine from management server, never had to specify anything with login

Re: One Time Scripts on Gaia Embedded

G_W_Albrecht — Mon, 27 Aug 2018 08:19:17 GMT

Yes, see also sk119633 ! It seems that only "bashUser" needs this environment variable set. Also compare my last comments in Activate bashUser via script on a Embedded Gaia device?

Re: One Time Scripts on Gaia Embedded

Maarten_Sjouw — Wed, 29 Aug 2018 20:50:34 GMT

though cprid util is very powerfull, back in the Edge days, there was a script page in the FW object where you could just enter a command that would be executed locally on the Edge device.

This was probably executed by a early cprid equivalent, but I think TS might be looking for something like this?