Thanks all but I got it working. I defined a secondary node object for the firewall in the authentication agent and it burst into life. Strange - I thought I had already done this!!
-----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Mark Senior Sent: 20 June 2007 16:49 To: [email protected] Subject: Re: [FW-1] NGX, Nokia and Secure ID Is this a single firewall or a cluster? Check what IP the query is coming from, and make sure the SecurID server knows to expect queries from that address. Have you put that address in an sdopts.rec file? Mark On 6/20/07, Dave Allen <[EMAIL PROTECTED]> wrote: > Yes - done all that. > > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > [mailto:[EMAIL PROTECTED] On Behalf Of > Paterson, Don > Sent: 20 June 2007 15:08 > To: [email protected] > Subject: Re: [FW-1] NGX, Nokia and Secure ID > > Have you created, or been instructed to create, the /var/ace directory > and copy the current sdconf.rec file from the RSA data directory into > there? Cpstop and cpstart required before and after. > What have you done so far? > > > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > [mailto:[EMAIL PROTECTED] On Behalf Of Dave > Allen > Sent: 20 June 2007 14:33 > To: [email protected] > Subject: [FW-1] NGX, Nokia and Secure ID > > Hi all, > > > > I'm trying to setup client authentication using RSA Secure ID (version > 6.x) with Nokia IPSO 4.1 and NGX R60. Authentication requests are being > received at the RSA manager but the logs report that the user's password > is wrong, yet a local test authentication works fine. I have found > several documents on the RSA and Nokia support sites but they are all > quite old and only make reference to ACE version 5.x. Has anyone set > this up for the latest versions and if so can you point me in the > direction of any useful documentation. > > > > Regards, > > > > Dave Allen CCSE > > TAC Team Leader > > Phoenix IT Group > > * DDI: +44 (0) 1494 460724 > > * Mobile: +44 (0) 7768 302017 > > * [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> > > > > P Please consider the environment before printing this email > > > > > This e-mail and any attachment is for authorised use by the intended > recipient(s) only. It may contain proprietary material, confidential > information and/or be subject to legal privilege. It should not be > copied, disclosed to, retained or used by, any other party. If you are > not an intended recipient then please promptly delete this e-mail and > any attachment and all copies and inform the sender. Thank you. > > > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
