[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [FW1] RE: Urgent: SP4 breaks LDAP -Account-Management ?
Hello, I made some tests and now I have more infos for this problem. SP4 doesn't break LDAP at all. The usage of Client-Authentication with LDAP (maybe for ftp or telnet) works fine, the usage of Securemote with LDAP and Username PW works also fine. But the usage of Securemote, IKE and Certificates doesn't works with LDAP after applying the SP. The FW doesn't contact the LDAP-Server and search for the user. Because the user doesn't exists local the client cannot connect and gets the message "CN: User unknown". In the situation described above the FW1 searches the user in the ldap-database. BTW: I use the same group for Client-Authentication and Client-Encryption, so it can't be a configuration problem (also because it wokred with SP3). Has anyone Securemote with IKE, LDAP and Certitificates working on a FW with SP4 and Redhat Linux ?? Please let me know it. Best regards Daniel Fitzner ------------------------------------------------------------------------ ---- --------- Daniel Fitzner IT-Services T-Systems debis Systemhaus GEI GmbH / GS Berlin debis Haus am Potsdamer Platz 10875 Berlin mail: [email protected] fon: +49 30 2554-3266 fax: +49 30 2554-3187 -----Original Message----- From: Fitzner Daniel Sent: Tuesday, July 24, 2001 12:54 PM To: FW1-Mailinglist (E-Mail) Subject: Urgent: SP4 breaks LDAP -Account-Management ? Importance: High Hi to all, we use CP-FW1 with SP3 and LDAP-Account-Management on a RH6.2 Linuxbox. The authentication works well. Now I deciced to update the FW with SP4, but after that I cannot authenticate. The FW1 does not contact the LDAP-Server and I get only the message user unknown. Also the deletion of the LDAP-Account object and the recreation has no effetcs. I don't see something about ldap (only 2 nonrelevant things) in the release notes. Has anybody the same experiences and can help me ??? Best regards Daniel Fitzner ------------------------------------------------------------------------ ------------- Daniel Fitzner IT-Services T-Systems debis Systemhaus GEI GmbH / GS Berlin debis Haus am Potsdamer Platz 10875 Berlin mail: [email protected] fon: +49 30 2554-3266 fax: +49 30 2554-3187 ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|