[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[FW-1] Cluster XL SecurID authentication problems
- To: [email protected]
- Subject: [FW-1] Cluster XL SecurID authentication problems
- From: Greg Polanski <[email protected]>
- Date: Tue, 11 Feb 2003 16:43:18 -0600
- Comments: cc: "Polanski, Greg" <[email protected]>
- Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
- User-agent: Mozilla/5.0 (X11; U; SunOS sun4u; en-US; rv:1.0.1) Gecko/20020920 Netscape/7.0
Does anyone successfuly use SecurID with the http
security server on NG FP3 on Solaris 5.8, 64 bit?
What did you do to make it work?
Is there a patch for the problem below?
I am trying to use the http security server with
SecurID authentication in Cluster XL.
When a fixed password is used, the security server works
fine.
When SecurID is used, Cluster XL security server
fails authentication and requests authentication again
and again and again .......
The reason is that one of the cluster members successfully
authentications with ACE. However, the second cluster member
then uses the SAME name and password to authenticate too.
Since ACE is a single use password, the second test fails.
The following ACE log shows the problem.
02/11/2003 18:19:38U polansg/diamond4.adc.com02/11/2003 12:19:38L Passcode accepted nyland.adc.com
02/11/2003 12:19:38L Greg Polanski
02/11/2003 18:19:41U polansg/diamond3.adc.com02/11/2003 12:19:41L ACCESS DENIED, passcode incorrect nyland.adc.com
02/11/2003 12:19:41L Greg Polanski
Checkpoint NG, FP3 HF1, on Solaris 5.8 Generic_108528-18
Thank you
greg
_______________________________________________________________
Greg Polanski mailto:[email protected]
ADC Telecommunications, IncMSFAX
PO Box 1cell/pager
Minneapolis, MN [email protected]
_______________________________________________________________
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
