[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Active Directory Authentication
If you want Checkpoint directly authenticate via LDAP, you need to implement user authority. Another alternative is to use Microsoft IAS. Make sure you check "support unencrypted PAP" during configuration in order to make make it work. Wayne --- Hadmut Danisch <[email protected]> wrote: > On Wed, Oct 08, 2003 at 03:51:04PM -0500, O'Flynn, > Derek wrote: > > I'm currently using FP3, but with a RADIUS server > that is tied into my MS > > domain. I had to setup an external user profile > in FW-1 and point this to > > the RADIUS server. Works great for SecuRemote. > > > > I would love if someone could post how integration > with AD is achieved. I > > would like to start doing some user based / group > based controls using AD. > > I cannot do this with the current RADIUS setup. > It's either yes they > > authenticate or no they don't. I cannot say for > this group they can access > > this site w/ authentication, these user cannot. > > > You could still have an LDAP user group without any > Checkpoint > attributes and thell the Checkpoint to query the > RADIUS server as > the default authentication. This allows to have > different user groups > for different LDAP branches or LDAP groups. > > But I'd like to play the game without RADIUS. > > Hadmut > > (BTW: Which Radius server do you use?) > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [email protected] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [email protected] > ================================================= __________________________________ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|