Yes, you need an extra license in order to use LDAP while Radius and Tacacs comes for
free.
Lars
-----Original Message-----
From: Leonardo Boulton [mailto:[EMAIL PROTECTED]
Sent: Thu 09-Oct-03 2:47 PM
To: [EMAIL PROTECTED]
Cc:
Subject: Re: [FW-1] Active Directory Authentication
Don't you need a especial license for that? (Account Management).
Can you query an AD server without such license?. Maybe using Radius?
L.
On Wed, 2003-10-08 at 21:32, O'Flynn, Derek wrote:
> If you just want to use AD for SecuRemote connections, create the LDAP
> connection with appropriate settings and then assign a user via LDAP. I
> have heard rumors that the performance on LDAP sucks, but I have not tested
> it yet...no active directory yet :(
>
> I'm using Cisco's Access Control Server 3.1 at the moment because we are
> providing LEAP wireless authentication as well through them. Windows Server
> has IAS, Internat Authentication Server which is easy to setup as well if
> you wanted to go the RADIUS route.
>
> Derek
>
> -----Original Message-----
> From: David Crowfoot [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, October 08, 2003 6:21 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [FW-1] Active Directory Authentication
>
> I had this setup and working before. I did not extend the schema or use
> radius services. Let me look up my notes, and recreate the setup. I
> was using it for secureclient.
>
> Dave Crowfoot
> www.works4me.com
> 602-771-4796
>
>
> >>> [EMAIL PROTECTED] Wednesday, October 08, 2003 1:24:28 PM >>>
> Hi,
>
> I'd like to connect a Checkpoint NG-AI to a Microsoft
> Active Directory such that it uses the AD user database
> without further user management:
>
> I'm querying the AD as a LDAP user group which
> works well to find the user. But how can the
> Checkpoint verify the password given by the user?
>
>
> One solution would be to extend the LDAP Schema and
> to store the FW-1 passwords on the LDAP server, but that's
> not desired. There should be no further passwords, just the
> passwords the users use to login at the Windows machines.
>
>
> Another solution would be to configure the Checkpoint to
> query a RADIUS/TACACS server. ADS doesn't play RADIUS, does it?
>
> So what's the simplest way to allow users to authenticate against
> the Checkpoint (user auth/secure client) with the same password they
> use at their windows machines?
>
> regards
> Hadmut
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
