Adding new admin user to CheckPoint Gaia with expert permissions

To add a new administrator user account with “expert” prompt add following lines to configuration in the CLI shell:

[code]
add user NEWUSER uid 0 homedir /home/NEWUSER
set user NEWUSER gid 100 shell /bin/bash
set user NEWUSER password-hash $1$************ / OR / set user NEWUSER password
add rba user NEWUSER roles adminRole
[/code]

Replase NEWUSER with new administrator’s login name.

This new account will login in “expert” shell and will not need to type additional password.
To access Gaia’s CLI shell user will need to execute /bin/clish

4 thoughts on “Adding new admin user to CheckPoint Gaia with expert permissions

  1. Pingback: new GAIA admin user can’t execute native commands « DreezSecurityBlog

  2. Thanks for the hint. I’m still missing the possibility for making tacacs users UID 0. CP R&D states that the _nonlocl cannot be changed to this and it’s by design. If you do manually alter the UID nothing is working 🙂

    Just a hint if looking in this direction.

Leave a Reply

Your email address will not be published. Required fields are marked *