Re: [FW-1] Active Directory Authentication

[Hadmut Danisch <hadmut@FW1-NOSPAMDANISCH.DE>]

On Wed, Oct 08, 2003 at 03:51:04PM -0500, O'Flynn, Derek wrote:
> I'm currently using FP3, but with a RADIUS server that is tied into my MS
> domain.  I had to setup an external user profile in FW-1 and point this to
> the RADIUS server.  Works great for SecuRemote.
>
> I would love if someone could post how integration with AD is achieved.  I
> would like to start doing some user based / group based controls using AD.
> I cannot do this with the current RADIUS setup.  It's either yes they
> authenticate or no they don't.  I cannot say for this group they can access
> this site w/ authentication, these user cannot.


You could still have an LDAP user group without any Checkpoint
attributes and thell the Checkpoint to query the RADIUS server as
the default authentication. This allows to have different user groups
for different LDAP branches or LDAP groups.

But I'd like to play the game without RADIUS.

Hadmut

(BTW: Which Radius server do you use?)

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================