If you just want to use AD for SecuRemote connections, create the LDAP connection with appropriate settings and then assign a user via LDAP. I have heard rumors that the performance on LDAP sucks, but I have not tested it yet...no active directory yet :(
I'm using Cisco's Access Control Server 3.1 at the moment because we are providing LEAP wireless authentication as well through them. Windows Server has IAS, Internat Authentication Server which is easy to setup as well if you wanted to go the RADIUS route. Derek -----Original Message----- From: David Crowfoot [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 08, 2003 6:21 PM To: [EMAIL PROTECTED] Subject: Re: [FW-1] Active Directory Authentication I had this setup and working before. I did not extend the schema or use radius services. Let me look up my notes, and recreate the setup. I was using it for secureclient. Dave Crowfoot www.works4me.com 602-771-4796 >>> [EMAIL PROTECTED] Wednesday, October 08, 2003 1:24:28 PM >>> Hi, I'd like to connect a Checkpoint NG-AI to a Microsoft Active Directory such that it uses the AD user database without further user management: I'm querying the AD as a LDAP user group which works well to find the user. But how can the Checkpoint verify the password given by the user? One solution would be to extend the LDAP Schema and to store the FW-1 passwords on the LDAP server, but that's not desired. There should be no further passwords, just the passwords the users use to login at the Windows machines. Another solution would be to configure the Checkpoint to query a RADIUS/TACACS server. ADS doesn't play RADIUS, does it? So what's the simplest way to allow users to authenticate against the Checkpoint (user auth/secure client) with the same password they use at their windows machines? regards Hadmut ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
