- Products
- Learn
- Local User Groups
- Partners
- More
Check Point Jump-Start Online Training
Now Available on CheckMates for Beginners!
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
ZTNA Buyer’s Guide
Zero Trust essentials for your most valuable assets
The SMB Cyber Master
Boost your knowledge on Quantum Spark SMB gateways!
Check Point's Cyber Park is Now Open
Let the Games Begin!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
Hello,
in dbedit, according to the documentation, you can edit elements of a list in the following way:
dbedit> modify network_objects My_FW interfaces:3:ipaddr IP_ADDRESS
This changes the attribute ipaddr of the 3rd interface.
How is this achieved which the gerneic api? How does one change attributes of a object in a list. Note that I am not asking how to change an ip address via api. My question is about general API syntax.
My use case is to go into a firewall object, navigate to the realmsForBlades section and change the userloginattr.
Something like
set generic-object uid="something'" realmsForBlades.1.directory.userloginattr SAMACOUNTNAME
, but that specific syntax does not work.
Probably, it's something like
set generic-object uid="something'" realmsForBlades.set .... ,but I cannot find the correct syntax anywhere.
Can anyone help?
Thanks
Christian Riede
Well. "generic"... ok.
on dbedit:
# dbedit
Enter Server name (ENTER for 'localhost'):
Please enter a command, -h for help or -q to quit:
dbedit> modify network_objects <name-of-firewall> realmsForBlades:0:directory:userloginattr SAMACCOUNTNAME
failed to get field realmsForBlades
Reason: in objects_5.0.C, it's realms_for_blades, not realmsForBlades. And it's not SAMACCOUNTNAME, but sAMAccountName
the following works:
modify network_objects <name-of-firewall> realms_for_blades:0:directory:UserLoginAttr sAMAccountName
Now please Checkpoint, can we get rid of dbedit soon?
Adding support for indexes like in dbedit to the generic API seems to be a low hanging fruit and would solve the problem in a general way.
Having a specific API for all the objects is probably the long term solution.
So the question is: What happens first - get rid of dbedit by making the generic api functional or get rid of dbedit and generic api at the same time once the specific api is available? 😂
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY