Managing User Accounts in Gaia Portal

Adding a new user

Step

Instructions

In the navigation tree, click User Management > Users.

Click Add.

In the Login Name field, enter the username.

The valid characters (between 1 and 32 characters) are alphanumeric characters, dash (-), and underscore (_).

In the Password field, enter the user's password.

All printable characters are allowed. Length is between 6 and 128 characters.

Important - Do not use the asterisk (*) character in the password. User with such password will not be able to log in.

In the Confirm Password field, enter the user's password again.

In the Real Name field, enter the user's real name or other informative text.

This is an alphanumeric string that can contain spaces.

The default is the user's Login Name with capitalized first letter.

In the Home Directory field, enter the user's home directory.

This is the full Linux path name of a directory, to which the user will log in.

Must be a sub-directory of /home/ directory.

If the sub-directory does not already exist, it is created.

In the Shell field, select the user's default login shell.

See the explanations in the "Login Shells" section below.

Select User must change password at next logon, if you wish to force the user to change the configured password during the next login.

Note - If the user does not log in within the time limit configured in the Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. Portal > User Management > Password Policy page > Mandatory Password Change section > Lockout users after password expiration > Lockout user after X days, the user may not be able to log in at all.

Optional: In the UID field, enter or select the applicable User ID:

0 for administrator users (this is the default option)
An integer between 103 and 65533 for non-administrator users (for example, for users with the default shell /usr/bin/scponly - see sk88981)

11^*

In the Access Mechanisms section:

Select Web to allow this user to access Gaia Portal.
Select Clish Access to allow this user to access Gaia Clish The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell)..

12^*

In the Available Roles list:

Select the roles you wish to assign to this user.

To select several roles:
1. Press and hold the CTRL key on the keyboard.
2. Left-click the applicable roles. The selected roles become highlighted.
Click Add >. The selected roles move to the Assigned Roles list.

Click OK.

^* To configure these settings in Gaia Clish, see Configuring Roles in Gaia Clish.

Shell

Description

/etc/cli.sh

This is the default option.

Lets the user work with the full Gaia Clish.

By default, some basic networking commands (such as ping) are also available.

The Extended Commands in the assigned roles makes it possible to add more Linux commands that can be used (see List of Available Extended Commands in Roles).

User can run the expert command to enter the Bash shell (Expert mode).

/bin/bash

BASH Linux shell.

Lets the user work with the Expert mode.

User can run the clish command to enter the Gaia Clish.

/bin/csh

CSH Linux shell.

User can run the clish command to enter the Gaia Clish.

/bin/sh

SH Linux shell.

User can run the clish command to enter the Gaia Clish.

/bin/tcsh

TCSH Linux shell.

User can run the clish command to enter the Gaia Clish.

/usr/bin/scponly

User is not allowed to log in to Gaia.

User can only connect to Gaia over SCP and transfer files to and from the system.

Other commands are forbidden.

/sbin/nologin

User is not allowed to log in to Gaia.

/bin/p1shell

Obsolete. Do not use this option anymore.

Important - The p1shell is not supported (Known Limitation PMTR-45085).

Changing the user configuration

Step	Instructions
1	In the navigation tree, click User Management > Users.
2	Select the user.
3	Click Edit.
4	In the Real Name field, enter the user's real name or other informative text.
5	In the Home Directory field, enter the user's home directory.
6	In the Shell field, select the user's default login shell.
7	Select User must change password at next logon, if you wish to force the user to change the configured password during the next login.
8	In the Available Roles list, select the roles you wish to assign to this user and click Add >.
9	In the Assigned Roles list, select the roles you wish to remove from this user and click Remove >.
10	Click OK.

Note - For the default users admin and monitor, you can only change the Shell and Roles.

Deleting a user

Step	Instructions
1	In the navigation tree, click User Management > Users.
2	Select the user.
3	Click Delete.
4	Click OK to confirm.

Note - You cannot delete the default users admin and monitor.