What is the easiest way to create admin accounts on multiple PANs for LDAP auth?

reubeng — Fri, 26 Apr 2013 09:25:34 GMT

I am trying to set up LDAP auth on the PANs and they need local accounts to reference. I have multiple fw's and curious if there is an easier less manual way of creating these accounts.

Re: What is the easiest way to create admin accounts on multiple PANs for LDAP auth?

ksteves1 — Sat, 27 Apr 2013 19:37:12 GMT

Using a panxapi program from either PAN-perl or PAN-python (on

DevCenter) you can clone parts of a config from one device to another.

In this example I clone a mgt-config user. See doc/panxapi.html from

PAN-python. There are a lot of options, and you'll need to invest some

time to understand various config XPaths.

$ panxapi.py -t pa-200-a -sxr "/config/mgt-config/users/entry[@name='ksteves']" >X.xml

show: success

$ panxapi.py -t pa-200-b -S X.xml "/config/mgt-config/users"

set: success

$ panxapi.py -t pa-200-b -Xjro 'show jobs id "397"'

op: success

{

"job": {

"details": {

"line": "Configuration committed successfully"

"id": "397",

"progress": "12:24:18",

"result": "OK",

"status": "FIN",

"stoppable": false,

"tenq": "2013/04/27 12:23:29",

"tfin": "12:24:18",

"type": "Commit",

"user": "admin",

"warnings": null

}

topic Re: What is the easiest way to create admin accounts on multiple PANs for LDAP auth? in General Topics

What is the easiest way to create admin accounts on multiple PANs for LDAP auth?

Re: What is the easiest way to create admin accounts on multiple PANs for LDAP auth?