Bulk User Renewing

[Gutts]

Hey all,

Does anyone know if you can or can't mass renew users in checkpoint or maybe in a single group within checkpoint?

Example: Group A users are going to expire in 12/31/2006, anyway to bump the date to 2007 for all at once?

[abusharif]

there is no automated function but u could do:

-fwm dbexport -f /root/myusers.txt
-cd /root; cat myusers.txt |sed 's/31-dec-2008/31-dec-2020/g' > /root/mynewusers.txt
*(first date is the expiration date, second date is new date to set it to)
-and them fwm dbimport on the newcreated mynewusers.txt file.

Try it in test enviorment first

[Gutts]

Ooh nice..

Just curious do you happen to know the type of DB it is? Or is it a proprietary db?

[abusharif]

Originally Posted by Gutts

Ooh nice..

Just curious do you happen to know the type of DB it is? Or is it a proprietary db?

No idea on the format but its a semi-binary so its not possible to go berserk on the db file straight away so you need to export it first.

[northlandboy]

Nice use of sed from abusharif, but there is in fact a proper way of doing this:

fwm expdate <dd-mmm-yyyy> [-f dd-mmm-yyyy]

The first date field is the one you want to set them to, the second one is optional, if you only want to change users expiring on a specific date.

sk522, also in the CLI guide.

No need to run it through a test environment either, this is a standard Check Point command. I've used it quite a few times.

[abusharif]

Originally Posted by northlandboy

Nice use of sed from abusharif, but there is in fact a proper way of doing this:

fwm expdate <dd-mmm-yyyy> [-f dd-mmm-yyyy]

The first date field is the one you want to set them to, the second one is optional, if you only want to change users expiring on a specific date.

sk522, also in the CLI guide.

No need to run it through a test environment either, this is a standard Check Point command. I've used it quite a few times.

*blush* missed that one completely :(