r80.10 VPN user account export?

[Craig_Branham]

We are doing a complete data base rebuild and I was wondering if there was any way to export VPN user information instead of having to recreate every individual user. Most all are users are Username and PW with some Certs at certain Sites.  Any help would be awesome!!! Thanks!!!

[PhoneBoy]

Users are one of the few things that are still using CPMI (i.e. they are not available through the REST API).

Which means using dbedit.

From the management station (or domain), you should be able to use dbedit -local and get a prompt.

From there, you can issue the command printxml users

However, this output will not be in a format that you can immediately "import" into an existing management station.

The dbedit commands needed to create a user look something like this:

create user USER_NAME
modify users USER_NAME auth_method "Internal Password"
modify users USER_NAME internal_password PASSWD
update users USER_NAME
addelement users USER_GROUP '' users:USER_NAME
update users USER_GROUP

From the XML output you should be able to figure out the commands needed to recreate a user.

I imagine you could script this.