Create/Modify/Delete administrators user from the Multi Domains Server

[oconnork]

Hello Community,

I am currently struggling to find a way to modify a user password from the Checkpoint Multidomain Server via SSH.

I have found a different way to do it by deleting the user and creating it again But when I create the new user, there is the option "user must change password on next login" which is selected by default and I didn't find out how to change that.

The commands that I'm using are the following : 

mdscmd deleteadministrator toto

mdscmd addadministrator toto myPassword MultiDomainSuperuser 

I have also tried to use the command mdsconfig with option (6) "Administrators"but it does the same (even more, it also add an expiration date).

Do you have any solutions to avoid the option "user must change password on next login" when I create the user ? 

[Tal_Paz-Fridman · Accepted solution]

Hi

Please try using Management API for Administrators, which also has a flag for "must-change-password"

https://sc1.checkpoint.com/documents/latest/APIs/#cli/add-administrator~v1.8%20

https://sc1.checkpoint.com/documents/latest/APIs/#cli/set-administrator~v1.8%20

[prisciltetchou]

Many thanks @Tal_Paz-Fridman 

It is working now

If it can help others, I'm using the following command : 

mgmt_cli -r true set administrator name "toto2" password "mypassword" must-change-password false authentication-method "INTERNAL_PASSWORD" multi-domain-profile "multi-domain super user" --version 1.5 --domain 'System Data' --format json