Create a Cpmi User with Checkpoint API

[mervin16]

Hello,

I am trying to create a CPMI user from the Checkpoint API using postman.

I didn't find anything on the documentation for CPMI User and CPMI User groups but i could find something about generic-objects on forums. When i search for generic-objects on the documentation, i still don't find it.

I tried something like this with generic-object to create a user:

https://{{sms_ip}}/{{base_url}}/add-generic-object

{
    "name": "jdoe",
    "create": "com.checkpoint.objects.classes.dummy.CpmiUser",
    "authMethod": "INTERNAL_PASSWORD",
    "internalPassword": "jdoe1"
}

The user is created but when i try to log in on the Check Point portal, it doesn't work. It has authentication errors.

However, if i create the same username and password manually on the SMS, it works.

Any idea why on the API it's not working ? Am i doing something wrong ?

[funkylicious]

I think add-generic-object it's a deprecated call, since I can only find related things for it in v1/1.1 of the API.

Did you publish after adding it ?

What API version are you running on your SMS ?

[PhoneBoy]

generic-object calls are not deprecated per-se, but they are not formally documented or supported.
generic-object calls can be used in a handful of situations where a formal API does not exist.

[PhoneBoy · Accepted solution]

There are formal API calls for this in the latest R80.30/R80.40 JHF as well as R81.
See: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/changelog~v1.6.1

If you don't want to upgrade, have a look at this thread, which explains how to do it: https://community.checkpoint.com/t5/API-CLI-Discussion-and-Samples/Add-new-user-and-assign-to-an-exi... 

[mervin16]

Thank you so much! I've been looking for this for a while now. Appreciate the help.