Re: [FW1] Integrating Firewall 1 with LDAP Server

[CryptoTech <cryptotech@FW1-NOSPAMgmx.de>]

Joaquin,
Clean install:

Depending on the version of netscape server, you simply do what scott suggested, go
into directory server configuration, disable schema checking and the import the
schema.ldif from the solaris2\CPfw1-41\reloc\lib\ldap directory.  Once this is done,
you simple tell your management station that you will use ldap user management
(policy -> properties - LDAP)
Create the account unit, fetch the structure, and BAM, you're done.

I've done this with Netware LDAP, and Netscape LDAP.  Once the unit is created, you
have to use the AMC to modify the firewall specific attributes.  If userid password
is all you need (ie. User Auth, Client Auth) then you don't need AMC.  For
securemote linking, you will need the AMC.

my 2cents,
CryptoTech

Scott Schindler wrote:

> You are saying that instead of disabling schema checking, you actually
> created the classes and attributes in the LDAP server?  There are like 2
> classes and 22 attributes that need to be created I thought.  Just off the
> top of my head.  Are you using the info in the admin guide to do this?
>
> I have not tried this yet, but I am very interested in actually doing so.
> If you have to get it working immediately you can disable schema checking,
> which I'm sure you knew.  But then of course you must manage users from the
> AMC for full Check Point interoperability.
>
> ----- Original Message -----
> From: "Joaquin López" <joaquin.lopez@aznar.es>
> To: <fw-1-mailinglist@lists.us.checkpoint.com>
> Sent: Thursday, November 23, 2000 11:16 AM
> Subject: [FW1] Integrating Firewall 1 with LDAP Server
>
> >
> > I need to integrate the Firewall1 with the Netscape Directory LDAP
> > Server.
> > I have followed all the necessary steps in the manuals, but it doesn't
> > runs.
> > The Firewall doesn't recognizes the different users defined in the LDAP
> > Server.
> >
> > Can someone help me?
> >
> >
> >
> > ========================================================================
> > ========
> >      To unsubscribe from this mailing list, please see the instructions
> > at
> >                http://www.checkpoint.com/services/mailing.html
> > ========================================================================
> > ========
>
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================