RE: [FW1] Secure Domain Logon w/ SP2 win98 LMHOSTS entry

[Patrick Baird <pbaird@FW1-NOSPAMmvest.com>]

No.

I still haven't found what the entry into the dnsinfo.C file is for SP2 for
win98 clients.
Also, I have configured DUN as documented, but still have some questions.

	If I choose to logon using DUN, and select an MSN profile, I can not
log into MSN because it is using my network logon information which doesn't
work for MSN.  If I log in locally to the laptop, using a local NT account,
then dial MSN, SDL does not occur, and I can not browse network neighborhood
and must map all drives I want to use.

	What is the correct configuration for NT and SDL when dialing to an
ISP and logging in locally.  Or is there a way to use the ISP DUN and supply
alternate credentials?  SO here's what I tried:
	1.) at the network login select my domain, use my network account,
and select DUN
	2.) Choose my ISP DUN setting
	3.) In the window that pops up, enter my ISP domain info
	4.) - I get Error 5: Access Denied, I'm assuming it is still using
my network info to log into MSN

Does anyone have the process for SDL, dialing into an ISP, with SSO, on NT
in simple steps in english?  
Does anyone have the additional change to the dnsinfo.C file?

I have verified that my dnsinfo.C is correctly running and populating the
lmhosts file with the correct information as it should.

thanks!

PDB


-----Original Message-----
From: Bob Bisignani [mailto:rjbcheckpt@hotmail.com]
Sent: Monday, September 11, 2000 8:23 AM
To: danh@xylo.com; pbaird@mvest.com;
fw-1-mailinglist@lists.us.checkpoint.com
Subject: RE: [FW1] Secure Domain Logon w/ SP2 win98 LMHOSTS entry


Gentlemen,
           Have you gotten Secure Domain Logon (SDL) to work? I tried this 
using an NT and Windows 2000 Client and I was unable to get it to work. The 
PDC never answered. The log shows the request got thru but there was never 
any return answer. NT Event viewer on the PDC does not show anything either.

Thanks

Bob


>From: Dan Hitchcock <danh@xylo.com>
>To: "'Patrick Baird'" <pbaird@mvest.com>,        
>"'fw-1-mailinglist@lists.us.checkpoint.com'"  
><fw-1-mailinglist@lists.us.checkpoint.com>
>Subject: RE: [FW1] Secure Domain Logon w/ SP2 win98 LMHOSTS entry
>Date: Fri, 8 Sep 2000 16:18:42 -0700
>
>I think this is what you're after:
>
>http://support.checkpoint.com/kb/docs/public/os/winnt/pdf/SDL-Prep.pdf
>
>Don't be thrown by the "NT" in the URL - the info you want is in there.
>
>Dan Hitchcock
>CCNA, MCSE
>Network Engineer
>Xylo, Inc. (formerly employeesavings.com)
>>The work/life solution for corporate thought leaders
>
>
>-----Original Message-----
>From: Patrick Baird [mailto:pbaird@mvest.com]
>Sent: Friday, September 08, 2000 3:30 PM
>To: 'fw-1-mailinglist@lists.us.checkpoint.com'
>Subject: [FW1] Secure Domain Logon w/ SP2 win98 LMHOSTS entry
>
>
>
>My previous post:  [FW1] Split Horizon DNS w/ Split DNS for VPN has been
>resolved, it is a simple matter of getting the NAT rules correct.  my fault
>for posting.
>
>Anyway,
>I am reading the SDL document for win98, authored on May 22, 2000 and I see
>the following:
>
>"To solve the issue of browsing with a win98 client, we will manually add 
>an
>LMHOSTS entry to the clients:
>
>##.##.##.##	"PDC-KIRK     \0X1B"	#pre
>
>Note: SP2 for CP2000 will allow central management of this entry through 
>the
>use of dnsinfo.C, and this document will be updated accordingly when it
>becomes available.  BLAH,BLAH...BLAH,BLAH"
>
>Well, i viewed this document today, have SP2 running, so I don't think it
>was updated.  Anyway, does anyone know how to modify the dnsinfo.C file to
>include the additional required LMHOSTS entry for win98 clients, instead of
>having to manually add the 0x1b entry to each clients lmhosts file?
>
>thanks
>
>PDB
>
>
>
>===========================================================================
=
>====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>===========================================================================
=
>====
>
><< HowtoconfigureSecureDomainLogon-PreparingYourNetwork.url >>

_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================