NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Active Directory Authentication



If you want Checkpoint directly authenticate via LDAP,
you need to implement user authority. Another
alternative is to use Microsoft IAS. Make sure you
check "support unencrypted PAP" during configuration
in order to make make it work.

Wayne
--- Hadmut Danisch <[email protected]> wrote:
> On Wed, Oct 08, 2003 at 03:51:04PM -0500, O'Flynn,
> Derek wrote:
> > I'm currently using FP3, but with a RADIUS server
> that is tied into my MS
> > domain.  I had to setup an external user profile
> in FW-1 and point this to
> > the RADIUS server.  Works great for SecuRemote.
> >
> > I would love if someone could post how integration
> with AD is achieved.  I
> > would like to start doing some user based / group
> based controls using AD.
> > I cannot do this with the current RADIUS setup.
> It's either yes they
> > authenticate or no they don't.  I cannot say for
> this group they can access
> > this site w/ authentication, these user cannot.
>
>
> You could still have an LDAP user group without any
> Checkpoint
> attributes and thell the Checkpoint to query the
> RADIUS server as
> the default authentication. This allows to have
> different user groups
> for different LDAP branches or LDAP groups.
>
> But I'd like to play the game without RADIUS.
>
> Hadmut
>
> (BTW: Which Radius server do you use?)
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================


__________________________________
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.