What is the easiest way to create admin accounts on multiple PANs for LDAP auth?

[reubeng]

I am trying to set up LDAP auth on the PANs and they need local accounts to reference. I have multiple fw's and curious if there is an easier less manual way of creating these accounts.

[ksteves1 · Accepted solution]

Using a panxapi program from either PAN-perl or PAN-python (on

DevCenter) you can clone parts of a config from one device to another.

In this example I clone a mgt-config user.  See doc/panxapi.html from

PAN-python. There are a lot of options, and you'll need to invest some

time to understand various config XPaths.

$ panxapi.py -t pa-200-a -sxr "/config/mgt-config/users/entry[@name='ksteves']" >X.xml

show: success

$ panxapi.py -t pa-200-b -S X.xml "/config/mgt-config/users"

set: success

$ panxapi.py -t pa-200-b -Xjro 'show jobs id "397"'

op: success

{

  "job": {

    "details": {

      "line": "Configuration committed successfully"

    },

    "id": "397",

    "progress": "12:24:18",

    "result": "OK",

    "status": "FIN",

    "stoppable": false,

    "tenq": "2013/04/27 12:23:29",

    "tfin": "12:24:18",

    "type": "Commit",

    "user": "admin",

    "warnings": null

  }

}