On Wed, Oct 08, 2003 at 03:51:04PM -0500, O'Flynn, Derek wrote: > I'm currently using FP3, but with a RADIUS server that is tied into my MS > domain. I had to setup an external user profile in FW-1 and point this to > the RADIUS server. Works great for SecuRemote. > > I would love if someone could post how integration with AD is achieved. I > would like to start doing some user based / group based controls using AD. > I cannot do this with the current RADIUS setup. It's either yes they > authenticate or no they don't. I cannot say for this group they can access > this site w/ authentication, these user cannot.
You could still have an LDAP user group without any Checkpoint attributes and thell the Checkpoint to query the RADIUS server as the default authentication. This allows to have different user groups for different LDAP branches or LDAP groups. But I'd like to play the game without RADIUS. Hadmut (BTW: Which Radius server do you use?) ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
